Email Security

Cisco Secure Email Upcoming Events

Getting Started with Cisco Secure Email Threat Defense Join us as our experts walk you through some of the fundamentals, key concepts, and outcomes of the Cisco Secure Email Threat Defense product. We will help you gain the insight needed to create a...

Attachments blocking

Hi, We have a list of attachments blocked with the following message filter. However, would like to add a big list of attachment into the existing one. Is there any best practice or recommended practice to block such a big list of attachments. Any he...

Limit IronPort relay access using username and password

Hi Support Community, As my understand is the Cisco IronPort can act like a relay server to accept the external SMTP request then send out the email thru the Cisco IronPort gateway. Is there an that have configuration can be done in the IronPort to ...

Senderbase - Is Network Owner/ASN a factor in Spam reputation?

Just have a couple of queries regarding the role of the Network Owner and/or ASN in the calculation of the email reputation: · Does the BGP ASN and/or Network Owner play a role in the reputation calculation?· If so, how does it factor into the spam r...

Resolved! Ironport Regex

I'm needing regex of some sort for the content filter to quarantine emails with following subject, Completed: [domain name] – "Wire transfer for recipient-name Document Ready for Signature"Completed [domain name/email address] – "Accounting Invoice [...

Divert E-mail that not meet Mail Flow Policy to another ESA

Hi Cisco Support Community, Recently my client requested to configure their Production Cisco IronPort to divert E-mail that contained >50 recipients and >10 MB size to another Cisco IronPort that are not considered as critical infrastructure. I hav...

ESXI 6.5 support for Virtual Appliance

I would like to find out when ESXI 6.5 will be supported for virtual appliances.

Resolved! CISCO C300V Mail Appliance.

Hi, I've just inherited some security requirements on our C300V mail appliances. I have, pretty much zero experience with CISCO technologies, so please bear with me if i get terminology or technical capabilities wrong. I'd like to separate our emai...

Resolved! Inspect PDF documents for embedded Office macro-files

Hey guys, last week us hit jaff ransomware. Some users got suspicious mails and opended the attached .pdf file, allow execution in Adobe Reader and MS Office started and loaded macro code. This code had downloaded some more files from the web and exe...

Cisco Email Security Appliance Error Reporting

Dear All, We have recently deployed Cisco ESA 300v as our email Firewall, but it sends some emails to admins for the logs like "application Fault Occurred" I need to know if there is any knowledg...

Retrieving a stripped attachment by content filter policy

Hi All, Is it possible to retrieve an attachment from iron port ESA which is stripped by a content filter refered for incoming mail policy. Rerards, AbduL Razak

ESA | Error message in mail_logs

Wed May 17 10:36:43 2017 Info: New SMTP ICID 3650597 interface Data 1 (192.168.1.1) address 52.197.70.246 reverse dns host www.tca-autotech.com verified yesWed May 17 10:36:43 2017 Info: ICID 3650597 REJECT SG BLACKLIST match sbrs[-10.0:-3.0] SBRS -1...

Resolved! Message Filter, remote-ip syntax

Hi, I wrote a message filter using a syntax like if (remote-ip == "10.1.4.0/22") { drop(); } However when a message is send from 10.1.4.1, it doesn't match with this filter. Is my syntax correct. Or should I use something like: if (remote-ip == "10....

SPAM is send out thru the Cisco IronPort

SPAM is send out thru the Cisco IronPort to the external recipient. Senders keep change their domain server and use our organization mail gateway address to send out the email. Luckily the IronPort blocked those email, but we not sure it will fully b...

Cisco ESA - no output at Console line

Hello, I am experiencing issues in the deployment of a Cisco Email Security Appliance (ESA) C680. In fact I have no output at the console line of the appliance. There is also no ip address detected on the interfaces. Please how can I reset the appli...

Resolved! WanaCrypt or WannaCry Preventions on ESA

Hi Support Community, Is there any way to prevent this vulnerabilities on the ESA? Kindly advise. Thanks.

Email Security

Forum Posts

Cisco Secure Email Upcoming Events

Attachments blocking

Limit IronPort relay access using username and password

Senderbase - Is Network Owner/ASN a factor in Spam reputation?

Resolved! Ironport Regex

Divert E-mail that not meet Mail Flow Policy to another ESA

ESXI 6.5 support for Virtual Appliance

Resolved! CISCO C300V Mail Appliance.

Resolved! Inspect PDF documents for embedded Office macro-files

Cisco Email Security Appliance Error Reporting

Retrieving a stripped attachment by content filter policy

ESA | Error message in mail_logs

Resolved! Message Filter, remote-ip syntax

SPAM is send out thru the Cisco IronPort

Cisco ESA - no output at Console line

Resolved! WanaCrypt or WannaCry Preventions on ESA

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

Talos change IP Sender reputation increase from poor status

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability durin

Cissco Ironport "virus detected messages empty"

Modify Cluster configuration Ironport C195

Cisco ESA LDAPS error on Active Directory

How to combine White List Entry - Server AND Mailadress

merge two different clusters into one

What Information SMA Collect from ESA?

mail_logs / E-mails released from quarantine

Weak TLS ciphers detected by a Qualys scan and not used in SSLCONFIG