Email Security

Cisco Secure Email Upcoming Events

Getting Started with Cisco Secure Email Threat Defense Join us as our experts walk you through some of the fundamentals, key concepts, and outcomes of the Cisco Secure Email Threat Defense product. We will help you gain the insight needed to create a...

Resolved! Cannot send email to more than 100 BCC recipients

So far we are noticing this issue when a user tries to send an email to more than 100 recipients listed in the BCC: field. Sending the same message to 100 or fewer recipients is successful. The error received is: #550 4.4.7 QUEUE.Expired; message exp...

Resolved! Anti-Spam in deep

Hi, I can see through the message tracking that anti-spam engine is stopping some outgoing emails because Interim verdict Positive. How could I check the reason in deep to determine if it is a false o true positive?, which log could I check?, CLI mai...

ESA C170 - stop sending 'WARNING: VIRUS REMOVED' emails

Hi, our ESA C170 IronPort device is removing viruses from incoming emails, which is good, but the original message is still going to the recipients with the WARNING:VIRUS REMOVED message in the subject. Is there a way for the IronPort to not send th...

Anti Spam -Troubleshooting ESA

Buenos días: Tengo una consulta relacionada a envíos de correo electrónico de altos volúmenes dirigidos a distintos casillas de correos electrónicos. Mi situación actual es que los email que envío están siendo considerados como spam y me están dañan...

Using edit-body-text to remove text from an HTML formatted email

I am using edit-body-text to remove particular text from an email. This is partially working but not completely. The text is getting stripped out of the text/plain part of the mail but not out of the txt/html part so unless I send the mail in plain t...

Clarification needed regarding ESA operation

Hello folks, I would like to receive a confirmation that my way of thinking is correct regarding Email Security Appliance operation. Here is my question: Does not configuring domains in Sender List applied to a Sender Group (with specified SenderBas...

Resolved! Scan revealed weak ssl cipher.

I'm new to these ESAs C170s and one of our guys ran a scan and it came up with "SSL weak cipher vulnerability". Looking in the GUI under System Administration > SSL Configuration I see SSL v3 enabled. Also via the CLI: sslconfig settings: GUI HTTPS ...

copy of nbound and outbound email need to send aserver

Iron port (192.168.255.32/33 in cluster)receiving and sending email need to separate server(192.169.255.41 -inbound and 92.169.255.42 -outbound)

Resolved! Disclaimer and Meeting requests sent as attachments

I came into an environment where they have a C170 on firmware 9.7.0-125. I am not familiar with these devices so please explain in detail if you have any suggestions. When sending an outbound Exchange 2010 calendar appointment to another organizatio...

Cisco IronPort S370 License Renewal

Hi, What is the impact of not renewing the support for IronPorts S370? Could you also confirm which functions will grind to a halt and the functions which will resume as normal on the Web Security Appliance? Thanks,

Sending MTA's poor reputation with no contact possibility from client side

Hello I am running an normal MTA on 88.198.2.66, a few months ago i had problems delivering EMail from this MTA to Iron Port Mail systems running on mxX.dhl.iphmx.com. After lots of struggling with German zone-c management of the international domain...

Cluster info SSH or CCS

Hi, how can i know if one cluster is using SSH or CCS to communicate???? i have to replace an ironport damaged in a cluster and i cant see any config about the cluster in the config.xml, and i cant see anything in Webui or CLI about the cluster. how ...

Resolved! Block incoming email in Ironport C370

Hi Cisco Support, Kindly help up on how we can block a specific spam incoming email from our device. Hope for your prompt response. Thank you Best Regards

Resolved! Centralized reporting with 2 ESA C170

Hello, We have 2 C170 ESA (not clustered, one active and one passive in DRP mode). Is it possible to configure a cluster in a way that we can get the global traffic stats on a single report (in an active active configuration for HA BCP) ? Thanks.

Resolved! AsyncOS 9.6 Adding Alert Recipients IronPort ESA

I am trying to add recipients for alerts for the ESA System Health. According to the manual for AsyncOS 9.6, the alerts tab should be under the System Administration tab. However, there is no alert tab there. Is there a reason why the alert tab is n...

Email Security

Forum Posts

Cisco Secure Email Upcoming Events

Resolved! Cannot send email to more than 100 BCC recipients

Resolved! Anti-Spam in deep

ESA C170 - stop sending 'WARNING: VIRUS REMOVED' emails

Anti Spam -Troubleshooting ESA

Using edit-body-text to remove text from an HTML formatted email

Clarification needed regarding ESA operation

Resolved! Scan revealed weak ssl cipher.

copy of nbound and outbound email need to send aserver

Resolved! Disclaimer and Meeting requests sent as attachments

Cisco IronPort S370 License Renewal

Sending MTA's poor reputation with no contact possibility from client side

Cluster info SSH or CCS

Resolved! Block incoming email in Ironport C370

Resolved! Centralized reporting with 2 ESA C170

Resolved! AsyncOS 9.6 Adding Alert Recipients IronPort ESA

Congratulations to the Event Top Contributors Class of 2024!

Cisco + Splunk: It's a new day for your data.

A new chapter of the Spotlight Award begins!

Join us in Celebrating the New Year and the Nov.-Jan. Winners!

Announcing Resources That Guide You to Success

Talos change IP Sender reputation increase from poor status

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability durin

Cissco Ironport "virus detected messages empty"

Modify Cluster configuration Ironport C195

Cisco ESA LDAPS error on Active Directory

How to combine White List Entry - Server AND Mailadress

merge two different clusters into one

What Information SMA Collect from ESA?

mail_logs / E-mails released from quarantine

Weak TLS ciphers detected by a Qualys scan and not used in SSLCONFIG