Email Security

Cisco Secure Email Upcoming Events

Getting Started with Cisco Secure Email Threat Defense Join us as our experts walk you through some of the fundamentals, key concepts, and outcomes of the Cisco Secure Email Threat Defense product. We will help you gain the insight needed to create a...

How to upgrade certificate of Management appliance from SHA1 to SHA2

We are using M1070 in our email infrastructure and would like to upgrade the certificate from SHA1 to SHA2. Could you please suggest on how can I proceed further?

HAT WHITELIST No Content Filter

Hi everyone, Is anyone here tried that WHITELISTED IP sender under HAT has no Content Filter insoection? I was thinking on how to do this. All the incoming Mail (WHITELIST and UNKNOWNLIST) falls to DEFAULT policy. The UNKNOWLIST need to be scanned by...

Resolved! IronPort C170 - View Custom Certificate Authorities - page can not be displayed

Hello Community, we run a IronPort C170 cluster. When in the menu "Edit Certificate Authorities" i am not able to view the Installed certificates with the < View Custom Certificate Authorities or View System Certficate Authorities > link. Any time i ...

Resolved! SMA import Safelist/Blocklist

Hello, i faced the following question - when you import ESA devices in SMA for central management and quarantine the Safelist/Blocklist normally are not migrated. Am i right? Is there a way to import the safelists/blocklists in easy way or i have to ...

What steps are necessary on the SMA when we RMA an ESA

Se have a management appliance providing message tracking and reporting for our multiple ESA appliances. We are in the process of replacing an ESA that is failing via the RMA process. My question is what steps do we need to do on the management app...

Resolved! How to specify sender exception for content filter

Hello, I've created a incoming content filter to quarantine email if the SPF verification fail: SPF_Verification_Fail: if (spf-status == "fail") { quarantine("SPF_Verification_Fail"); } However, there are some trusted emails which are fail the SPF ve...

Regular Expression Credit Card Filter

I've been playing around with filters for credit cards and have yet to find one that stops all credit cards while limiting false positives because it is matching any random 16 characters.I need one that blocks all amex, visa, mc, and discover without...

Resolved! ironport email security custom setting for email and to view .enc or .raw file.

HiUsing Iron Port email security plugin - Reporting only. version 7.6I need to do some customization for install.due to other factors... i need to be able to customize the spam button to send to multilple email addresses. i see where to set it but u...

Resolved! Issue with Message Tracking in SMA after upgrade to v11

Hello, I have just upgraded my 2 ESA/C100V to the last version (11.0.0-264) and my SMA/M100V (11.0.0-115). Everything works fine except the message tracking feature in SMA. When I go to Email then Message Tracking, an error is displayed:Application E...

Cisco Email Security Appliance Denial of Service Vulnerability

Our C670 appliance is running with version 9.7.1-066. Do I need to upgrade to next version?https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-esa When I check for upgrades available for our appliance, then it is s...

ESA CASE engine Log

Hi All, I need to save on an external repository only the antispam verdit logs taking a look on the mail_logs 2 CASE logs are present by default is also present an antispam log, but no case verdict information are reported inside of this file in th...

CLOUD EMAIL ROUTING THROUGH CISCO CES

Hello Dear, we have an inhouse Mdaemon mail server which is used to route emails of 5 of our domains.we have configured cisco CES to secure our emails. All incoming emails from outside first hit ESA which scans and deliver to Mdaemon which is routing...

Anti-Virus engine Sophos. Interim verdict: ENCRYPTED means? ESA C670.

Hi Team,I would like to know "Anti-Virus engine Sophos. Interim verdict: ENCRYPTED"scanned by Anti-Virus engine. Found encrypted ---log says/ DCID has been genarated and delived to intended recipient as wellNote : The sending Ips/domain has been whit...

Ironport C680 ESA alert message

Hi, Any idea about the below alert. As i am receiving around 50 per day. cloudmark antispam - Micro-update serial number list has not been updated in 174126 seconds Regards,Jaseem

SNMPv3 Encryption algorithm on ESA

Hello, In User Guide of ESA, showed that the encryption algorithm can be AES (recommended) or DES of SNMPv3.I would like to check that what is the AES option (i.e., 128, 192 and 256) in SNMPv3 configuration of ESA. Thanks, Regards,Thaung

Email Security

Forum Posts

Cisco Secure Email Upcoming Events

How to upgrade certificate of Management appliance from SHA1 to SHA2

HAT WHITELIST No Content Filter

Resolved! IronPort C170 - View Custom Certificate Authorities - page can not be displayed

Resolved! SMA import Safelist/Blocklist

What steps are necessary on the SMA when we RMA an ESA

Resolved! How to specify sender exception for content filter

Regular Expression Credit Card Filter

Resolved! ironport email security custom setting for email and to view .enc or .raw file.

Resolved! Issue with Message Tracking in SMA after upgrade to v11

Cisco Email Security Appliance Denial of Service Vulnerability

ESA CASE engine Log

CLOUD EMAIL ROUTING THROUGH CISCO CES

Anti-Virus engine Sophos. Interim verdict: ENCRYPTED means? ESA C670.

Ironport C680 ESA alert message

SNMPv3 Encryption algorithm on ESA

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Knowledge Hub: Cisco Technology for Securing the Enterprise

Cisco + Splunk: It's a new day for your data.

Announcing Resources That Guide You to Success

ESA huge amount of traffic on external Interface via Port 80

ESA Arabic subject in Common Event Format (CEF) Logs

Why Cisco Secure add-in isn't available in Microsoft integrated apps ?

SPAM Emails

message rejected due to user rule

ESA single sign on not completing

Upgrade Ironport - DOWNLOAD INSTALLER

Is Smart Licensing mandatory when upgrading from 14.x to 15.x or later

Issues with incoming emails from HTML email.

Can I mix Cisco ESA Appliance C195 and Virtual Appliance in a Cluster