Email Security

Dear colleagues,   I am trying to set filter using message filter CLI. Could someone tell me how can filter on message header ? For example: I would like to trust all the messages "delivery report (or notification)" and "read report (or notification)...

I want to disable bounce address tagging for messages that use an envelope sender domain for which the ESA sends messages, but does not receive messages. I know that destination controls can be configured on an ESA to disable bounce address tagging f...

Hello,   I accidentally enforced  2FA on the administrator account. I also enabled external authentication. After using password to login to my admin account. I got another passcode screen to ask me to key in the passcode which I do not have.   Pleas...

Hi  I am receiving a lot of targeted phishing email and want to block an open relay SMTP servers so that to avoid a newly created SMTP server to send me an email.    your feedback is highly appreciated.   Thanks. 

We have been receiving this critical messages since last week. "MID 507128XX cannot be scanned by CASE. The message is either malformed or CASE is unable to process it at the moment."   ESA Version: 11.1.0-131Timestamp: 21 Nov 2018 13:40:58 +0530    

Version: 10.0.2-020   When releasing emails from the VIRUS quarantine containing ENCRYPTED flagged documents. The log indicates it is released, however, it then takes up to an extra 2 hours before; according to the logs, it clears all quarantines for...

Dear team,    We have implemented a CISCO ESA 300, unfortunately the license expired and didnt receive any alert messages. The box accepted mails with out any security until we applied new licenses after 12 hours. nearly around 1.5 lakh's mail was re...

Hi Team,  We have a message filter on ESA with some sighs please let us know what the sign says:  mail-from != "(?i)(@abc\\.com|qua_pca@domain\\.com).  Please share the data of sighs that we need to know/learn on ESA. Many thanks

Hey All,   I was wondering if there's a way to run a report of all outgoing messages that were NOT scanned by either anti-virus or DLP or anything. We had a major DLP incident and it was not caught because the file size was too large and it skipped t...

Hi, We are affected by some phishing attack from specific IP address. Can someone explain to me how easily I can block specific IP address on my ironport C170 device?   I was checking incoming mail filter, condition: Remote IP/hostname. Is that a pre...

HI,   I would like to have a session between azure O365 cloud and an on premise server behind Cisco ASA 5545. However the session cannot start due to STARTTLS failing. THe firewall cannot read TLS encrypted packets for port 25 hence the packets are d...

Cisco firewall with Dual-wan support and Web-application filtering ( users 70-100)Outbound anti spam with firewallVPN Licenses  ( 100 qty) Kindly suggest the solution.