Email Security

Hello dear ESA strong & passion admins,   can Cisco ESA filter messages where envelope/smtp header MAIL FROM do not match FROM: specified in message body, which is rendered by MUA (e.g. Outlook)?   Thanks a lot

Folks, Trying to setup a content filter to search the body of the email for a sentence/phrase and not having a lot of luck getting it to work. Looking to setup a filter to match on "You'll make the payment through Bitcoin" so that I can send them to ...

Hi, i have to redirect all my incoming mails to a mta that i am not allowed to manage. Now i have the challenge to keep the mailflow working even if the boxes are not available. In best case without any manual configuration. The redirect to the other...

Hello folks, I ran into a weird situation when I created a content filter for "envelop sender" email address to specifically block them but Ironport didn't seem to do anything about it. Ironport receives all mail from the internal company mail server...

Hey,   I am new to Cisco ESA product. According to my limited knowledge, below is a license meant to be installed on a Cisco ESA appliance. Please help in understanding.   ESA Premium SW Bundle (AS, AV, OF, DLP, ENC) License   Regards

So I am looking at two Outgoing Senders reports:      Top Senders by Clean Messages Top Senders by Total Threat Messages   And on the first one I see our top level domain (Example: state.gov) and my Department's sub domain (Example: MyDepartment.stat...

could you guys please try something for me, on your ESA or SMA go to Monitoring (Reporting) then Incoming Mail then scroll down to the bottom and in the Search for: pull down box select Domain and then type gmail.com and click the Search button (sorr...

we have the IP addresses of our on premise Exchange servers in our RELAYLIST Sender Group but in addition to those we also have two F5 load balancer IP addresses in there, these were added by the prior IronPort admin years and years ago and I am not ...

Hi,I have some problems with LDAP Queries.I want to querie my Active Directory on port 389 from our Ironport C350 which stands in the DMZ. Firewall has been opened for this connection.When I configure the LDAP accept querie an test it, I get an error...

I have a case open with Cisco on this and we believe we are doing everything right yet we can not break up our top level state wide domain to report the sub domains individually.  We are a state government.  Are any of you doing this, it would be lik...