Email Security

Is it possible to find the email sender ip address in Ironport logs?We recently had a virus outbreak, an infected computer -that no one could finde - was sending out email.  Locating the computer would help this situation out.

Could you please help on the below message is about   The Critical message is:   An application fault occurred: ('shared/UserPreferences.py getReportSections|106', "<type 'exceptions.AttributeError'>", "'str' object has no attribute 'get'", '[util/Aq...

Hi We have several external IP addresses on our IronPorts. If we send out notifications (by a message filter using notify())AsyncOS automatically selects the lowest available address.   Can this be influenced in any way?   (setting deliveryconfig to ...

Hello,   I am just wondering how to add a maildomain and all subdomains to an addresslist. For the HAT I can add .example.com for all servers in that domain and all subdomains, but for the addresslists I need that "@". So a @example.com is only the m...

Hi, We have deployed ASA since last few months, everything is working fine, but we have observe that sometimes if a file is declared Malware disposition from Cisco Cloud, it randomly changes to 'unknown' and that malicious file passed on to internal ...

Hi Team,  Could you please clarify the below Error description? what will be the impact? and the steps to minimize the impact as well.   The Critical message is:   An application fault occurred: ('navigation/HelpBarYUI.py my_tasks_list_submenu|639', ...

A customer of mine thinks there is a lot of false positives regarding their current ESA solution. Version is/was 9.7.X. Also, they would like to now why a mail is classified as SPAM not just the SBRS.

Hello,  I have a customer that is using "text resource".  This seems to burden the system or att least the text resource feature. Does anybody have the same problem?  

 i installed Active directory 2088R2 with exchange server 2010   1) first exchange server (mail.x.com)   vlan 40"192.168.40.245"      i want to use it as internally 2) second exchange server (mail.y.com) vlan 42"192.168.42.245    i want to use it as ...

Hi Team, i would like to know, is any notification will be send to sender "or" recipient if we block list an address/IP/domain on our ESA?   

We recently turned on an incoming mail filter to send emails containing executable and compressed file attachments to a quarantine policy and it notifies the end user to contact IT to release the message if they are expecting it.  The notification em...