Email Security

Hi Experts, Is it possible to configure VIP using Direct Server Response (DSR) feature in ESA without Load-balancer.   Scenario: Customer ha purchased 4 ESA boxes and want to get configured with VIP, but, customer doesn't have any Load-balancer.   An...

Hi Experts, My customer wants send internal email through ESA. Is it possible to send emails which destination is same same domain, for example a Cisco guy send email to another Cisco guy, through ESA?   Customer ESA is deployed with single leg.   Re...

Not sure where I should put this so if this is not the correct forum I apologize. I have the Cisco Ironport M670.  For Spam, I have a bunch of public folders and shared mailboxes.  Is there a way to have a user release those themselves like they can...

Syslog internal buffer overflow. Some data may be dropped. this may be because server () is not accepting data fast enough or because data is being generated more quickly than can be accommodated by the syslog protocol. Is there a Cisco Bug associate...

Graymail engine restarting due to Graymail Rules update.There is a 'manual' engine rollback feature - does not work - this is a rules update issue, not an engine update issue.We would like 2 engines available.Current engine version+ Previous engine v...

dear all. I configured url filtering and enabled url rewriting on outbreak filters. I tested it by sending malicious url via email  live.com to corporate email. after an hour email arrived with SUSPICIOUS message and added malicious url in that email...

Hi, Does any one know what's the meaning of this line in ESA configuration : <url_info_visibility><group>admin</group><group>cloudadmin</group></url_info_visibility> When i wanted to import conf to C390:I got this error   Configuration file was not l...

Dear all. yesterday I configured External Threat Feed in cisco esa. In order test it I send malicious url from my personal email to corporate email. that email directly send to Outbreak quarantine and approximately 1 hour later that email released fr...

Hello,   I need to monitor status of VLN on a number of ESA machines (ver. 12.1). I can check its status using CLI command 'showlicense'. I also receive alerts on email when something happens but I'd want not to rely on emails, but rather to get a Ji...

I need the SMA to trust an internal CA so I can use secure LDAP for end user quarantine access but I can't find anywhere how to add a trusted CA to the SMA database. Is there a way to do it?

Im having an issue with broken logs being pushed off the IronPort. My setup involves a cluster of Ironports set to do syslog push to a remote host that uses rsyslog. Local logs generated by rsyslog are referenced by a splunk forward server and sent t...