Getting Started with Cisco Secure Email Threat Defense Join us as our experts walk you through some of the fundamentals, key concepts, and outcomes of the Cisco Secure Email Threat Defense product. We will help you gain the insight needed to create a...
Forum Posts
Resolved! Ironport retransmission
We have new exchange configured to send email to ironport all IP has been added as relay . When we send test email we see as ICID lost , did injection debug and packet capture. Below are results from ironport to exchange. Kindly need your advise how...
Does 1.0.0-006 version available for Cisco secure add-in ?Currently, the latest version of Cisco secure add-in is 1.0.0-005 and does 1.0.0-006 version available ?manifest-email-submission-1.0.0-005.xml Maintenance TitleSecure Email Encryption Servic...
Hi,we have custom content filter - forged email detection - which includes dictionary with some internal company names.This filter generaly works fine, detects and sends forged mail to quarantine.But today false email passed through this filter, con...
Hello,there is a C195 with OS 14.2.3-031 (not sure since when this version is installed)and around 30-80 Users receive a Spam Quarantine Notificationwith unfamilar url (linked to OWA phishing) at button:View QuarantineRelease(it arrived from a extern...
Hello, this ESA is receiving Emails for a group with different Email Domains.I would like to use more content filters, but in the first step only for Mails to *@test-company.com(inbound mails) (blocking attachments types etc..)I don´t want the new c...
Hi, From time to time we get this kind of message when accessing some parts of the webUI: (for example when accessing the Spam Quarantine from Message tracking Malicious RequestError — The request appears to be malicious.The system has detec...
Currently we setup SAML for EUQ using Azure AD and we intend to add a new domain into our SMA. However, this domain resides in another O365 tenant, thereby having its own Azure AD. Since SMA/ESA supports only a single Identity Provider Profile for 'S...
One out of two nodes in out clusters have this error. We need help sorting it out.
We are using a DLP system provided X-header to quarantine messages at the IronPort. I know we can exclude (whitelist) specific senders from this quarantine, but is it possible to setup sender/receiver combinations for exclusion?What about receiver ex...
Resolved! Block wildcard domain
I've been blocking a set of domains from @*.info and they keep coming up with new email. Our spam filter is not dropping the emails so is there a way in the incoming policies to block all incoming emails from the .info domain? Is it possible to wildc...
Resolved! TLS failed. Reason unknown error
Hi guys, (my current esa version is 15.0.0-104I received an email that was aborted because of a TLS handshake failure. The reason for the failure is unknown. Here's my SSL configuration. any idea what cause email aborted?thanks,
Some background:our mx records point to a cloud service where all our user mailboxes reside. we have multiple domains, aligned to various lines of business & corporate entities.Ironports process outbound system mail only, senders may be things like ...
Cisco IronPort Email - Is there any way to block bulk email ID's
Dear All , We have two ESA integrated with SMA. We have enabled domain reputation on Cisco ESA according to the Cisco document and on ESA mail logs we can see the SDR logs as well.But on SMA for the domain reputation (SDR) report, it is showing 0 co...
Is it possible to install third party tools on ESA / IronPort AsyncOS? If yes, then please share how it can be done. As per my knowledge , asyncOS is customized linux OS.
