Hi,with DMARC we can reject mails during SMTP dialog (according to DMARC policies). However, with SPF and DKIM we can only drop/quarantine/bouce, but not reject. Acting on SPF results is only possible in message/content filters (which happen after SM...
Hello,we see an increasing count of PDF attachments which contain links to malicious URLs. All security measures fail.AMP doesn't scan/upload the PDF because of non-existing active/dynamic contents.Is there any way to detect such URLs inside of PDF a...
Hi,I keep wondering about ESA's reporting. For instance, we currently have about 15.000 emails with malicious URLs in a policy quarantine. This quarantine holds mails for 30 days and then deletes them. If I go to the URL Filter Report and select the ...
Hello Gurus I am new to cisco email security appliance , Hence looking for expert opinion. Due to COVAD-19, I assume companies are seeing large number of SPAM attack. I would like to know what you expert are searching in order to filter out maliciou...
Hi people, I hope you doing well , I have a little question , If I change the Spam Quarantine language I will receive the emails notification in this language or it is english by default? Thank you so much. Regards
I have a cisco ESA C190 running with OS version 13.0.0-392 My challenge is, my device is able to send emails, but I am unable to receive emails. This was working fine till yesterday the 16th of March 2020 at 4 pm. we did no changes on our end and am ...
I need to find all emails containing an attachment (.doc) received by the organization in the last 30 days.I have already tried to run the GUI on the SMA, but a max it returns if 1000 entries and we have more than 1000.Hence is there a backend query ...
Hi to all, Is there is a rate limit which allows to limit the maximum number of recipients per hour from host and from envelope sender and a way to limit the number of messages instead of the number of recipients?We want to avoid a faulty application...
I read through various documents and it's not clear to me what is the difference between "Incoming Relay" under "Network" an when to use a Relay list under HAT. To me, they served the same purpose. I need help to distinguish when to use one and whe...
Is there a way to submit suspect messages to Cisco directly from IronPort? It can be difficult to get a copy of a suspect message for submitting to the various e-mail addresses, and it would be a lot more efficient if we could just submit from IronPo...
Hello all,i want to know why my ESA applicance take over 3 minute to proccess an email, even when email queue are empty, you find bellow a screen shot about my mail track
Hi,is it possible to create LDAP Accept queries that contain exceptions? Something like "accept if email address is valid, except if address is in group XYZ".We need to reject certain recipients. They are too many to put them in the RAT and we can't ...
Good day. After upgrading the version of my ESAS i can´t access to the new interface giving me this error after waiting a while.Apparently everything is correct in our firewall, indeed i am getting access to the new console of the SMA without problem...
How do i turn off telnet access to the C-370
We did the another test , telnet these 2 IP address on port 25 and I found I can send email to any of your domains user anonymously.
