Email Security

Cisco Secure Email Upcoming Events

Getting Started with Cisco Secure Email Threat Defense Join us as our experts walk you through some of the fundamentals, key concepts, and outcomes of the Cisco Secure Email Threat Defense product. We will help you gain the insight needed to create a...

out of office messages not being delivered to external senders

A bit of an odd situation. We are migrating to a cloud email provider. For our early test users, email from external users comes to our ironports, flows through to exchange, then exchange forwards it out (through ironport again) to a shadow domain th...

Quarantine email recipient starts with 10

Hi, I created an incoming filter to quarantine an email recipient starts with 10, for example 109123@domain-y.com Recipient_Start_With_10: if (rcpt-to == "^10") { quarantine("Policy"); } I tested the filter and works fine. But, there are some email...

Resolved! Transfer ESA logs

Hi, I just install a new ESA to replace to old one. I would like to import the old logs to my new ESA. Can some body let me know the procedure. Thanks.

Resolved! Block Emails with Blank TO Section

Hi All, We are receiving Spam emails with blank TO address, is there any way we can Quarantine those mails in Cisco ESA. Eg: From : test@domain.com To: Date : 03/09/2016 11:00 AM Subject : Payment Thank you, Vishnu

Resolved! Possible to Check the SPAM Score of a Mail?

Hi everyone, We received a couple of suspicious mails lately, one of which contained the zepto Ransomware. Now we're in the process of figuring out why those mails were not blocked and i was wondering if i can check what SPAM Score those Mails recei...

Ironport C170 Warning: McAfee watchdog thread terminated and will restart

Always I send a Mail across the Ironport C170 the McAfee-Virusscanner produced the following message: Wed Aug 31 07:17:46 2016 Warning: McAfee watchdog thread terminated and will restart. Error was: ('_coro.pyx coro._coro.coro.__yield (coro/_coro.c:5...

Distribution Lists Security with LDAP

Hi, Has any one dealed with distribution groups in IronPort and Exchange 2010? We have some distribution groups that have "Require that all senders are authenticated" to prevent receiving emails from outside organization. However Ironport routes ema...

Resolved! Cisco ESA unable to process incoming mail from Microsoft Office365

Hi, I am doing a ESA POV for my customer. Deployed the ESA sitting on internal network with one-arm deployment. Firewall is doing the NAT to route incoming SMTP traffic to ESA and then their exchange server. We are facing issue with Microsoft Office...

Resolved! Regex needed information

Hi all, Can anyone tell me for mail filters, what about this regex means (?i)@abc\.com|@efg\.com The bold on the top means what? I cannot find a reference on this , why there must have ?i on it Can someone explain what is that use and meaning of ...

Resolved! Looking to add a notification template to sender on a message filter

We have a message filter in place that's automatically encrypting the newer office files if they're over 7Mb. It works well, but I would like to know if it's possible to add a notification to the sender to let them know the message was automatically...

Resolved! Detect executable file attachment in container files (OLE, PDF Attachment etc.)

Situation: we face some attacks with executables embedded in Office documents (OLE) where user then click and execute files like exe, bat etc. we use filetype filters to block exe, bat etc. but they do not match with embedded file types! also a probl...

Change from address

We have a third party utility that can action email. It can only action the email based on the specific sender address. So I want this tool to action all messages sent to a specific address but I cant do this without changing the from address to the ...

If / Then for TLS

Excuse my immaturity with the Email Security via Ironport C170. My task is to have all outgoing mail to seek TLS verification with destination... if found then great, message sent. IF NOT verified then Ironport sends as encrypted. My logic is this ...

Resolved! problem with shortening services in phishing mails

Hi, we are experiencing an increase of phishing mails containing shortened links from services like bit.ly, tinyurl.com or any other selfhosted solution. The ESA does a lookup only with the shortening service website which is mostly neutral and ther...

Resolved! Is it safe to delete expired old "IronPort Appliance Demo Certificate" from ESA cluster

The ESA C670 cluster has 'System Default' - "Cisco Appliance Demo Certificate" that is active also. In this case, is it safe to delete expired old "IronPort Appliance Demo Certificate" from ESA cluster? Hi .

Email Security

Forum Posts

Cisco Secure Email Upcoming Events

out of office messages not being delivered to external senders

Quarantine email recipient starts with 10

Resolved! Transfer ESA logs

Resolved! Block Emails with Blank TO Section

Resolved! Possible to Check the SPAM Score of a Mail?

Ironport C170 Warning: McAfee watchdog thread terminated and will restart

Distribution Lists Security with LDAP

Resolved! Cisco ESA unable to process incoming mail from Microsoft Office365

Resolved! Regex needed information

Resolved! Looking to add a notification template to sender on a message filter

Resolved! Detect executable file attachment in container files (OLE, PDF Attachment etc.)

Change from address

If / Then for TLS

Resolved! problem with shortening services in phishing mails

Resolved! Is it safe to delete expired old "IronPort Appliance Demo Certificate" from ESA cluster

On-Demand Webinar: B&M Security Transformation with Cisco XDR

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

Knowledge Hub: Cisco Technology for Securing the Enterprise

Announcing Resources That Guide You to Success

creation of a content filter with a specifi domain

Cisco CES - Duplicate values

Cisco Email and Web Message Remediation API

Problems with Email Gateway C600V

Text Resource - Disclaimer Template Please enter content

CES integration query

Firmware update package Cisco IMC CVE-2024-20295 CVE-2024-20356

Grouping content filter condition criteria

Delayed Deliveries Overnight