Email Security

I currently have a rule to drop filenames x.ab, but i want to include AMP in the process without moving it to a content filter. I see there is an option for skip-ampcheck, but what is the opposite for that?  scan-ampcheck or amp-verdict? Regards Che...

Hi Team,In the CES console for the audit log there is no option for check the administrative activities carried out to check what changes has been made by an administrative user. As per my research cisco.com it is not a configurable option.Can you pl...

Hi, we received multiple mails with HTML attachments containing paypal or other  banking phishing attempts, please find attached the HTML file in question. please let me know if the original mail is needed too. Those mails probably should have been ...

Hello, ESA 9.x appliance working well with listener on LDAP query. policies use ldap groups and it works. I try now to check an ldap group sender in a content filter "matches ldap group". this never works. I tried a lot of diffferent syntaxes but no...

Hi Team,In the CES console when the AMP is not able to scan the attachment there is action of Deliver or Drop, customer wants to have quarantine action for these mails. As per my research cisco.com it is not a configurable option.Can you please advis...

Hello,   I want to do not any checks(email security) for multiple IPs.   === ESA diagram==== Internet  --   MTA(Other Email Security Gateway) ---  MTA(Cisco ESA C690X) – Mail Server   I entered [Message filter] for  do not any security check 2.2.2.0...

Hi there,  when an email is undeliverable for one reason or another (unknown address invalid recipient, etc) I'd like to be able to include more information to the original sender.   Currently they get back: The following message to <user@email.com> ...

Wanted to upgrade my appliances but I have some concerns about performance. In the release notes there is a Performance Advisory:   RSA Email DLP • Enabling RSA Email DLP for outbound messages on an appliance that is already having anti-spam and anti...

2xC170's on 7.6.1-022 in a cluste and LDAP integrated to Active Directory.  All authentication is working as expected, I've seen now issues.After a user clicks "Release" on a line item in their spam quarantine notification e-mail, the e-mail is relea...

We have IronPort encryption auto enabled for certain smart dictionaries like SS#, ABA Numbers, etc... and for the most part this works, however there are some false positives we need to work through. This is request is coming from an EVP of Marketin...