Email Security

Hi everyone!I'm having a strange behavior with the disclaimers in my appliances.All the email sent to Internet has to have a disclaimer text, I add this disclaimer through a outgoing content filter and noticed that sometimes the email adds it correct...

Guys,Do you have any idea about license Cisco ESA in Cluster Configuration> If i have two appliance in cluster configuration and i have 1000 user, which option for license i must buy ?1. Just one license for two appliance (which in cluster configurat...

I have automated script to:1) SSH into ESA2) Generate configuration file3) Back it up.The script works fine until I did the upgrade in the past weekend, what I found is that now on version 8.5.6, the command "saveconfig no" is restricted to "cluster ...

I had URL Categories enabled on an inbound policy but it was blocking a lot of legitimate emails.  Is there a way to tell what category triggered the block in the body of the email?  I am trying to figure out the why behind the emails being bounced. 

I have outgoing e-mails scanned for SPAM at the highest thresholds to prevent compromised accounts from sending phishing attempts out from my environment. In the last week or two I have seen a huge increase in the number of false positives on meeting...

As part of Security Awareness training and testing we contracted a company called knowbe4 to initiate some random spoofed e-mail tests into our domain.  Normally I would have figured this would fail because when email comes into the C160 and it has o...

Hi,We have published SPF, DKIM and DMARC and now we start getting DMARC Reports. What is strange is that there are few messages that are send with email Ironport hostname? We have some situations when we return mail reject custome message but that me...

Hi all !Doing some TCP captures, I noticed that all packets originating from the Ironport's have the "Don't Fragment" Bit set...Is this normal / wanted ? Can this be disabled ? (I suspect this is causing problems in some situations...)Could these two...

Dears, I found that McAfee AV doesn't scan RAR files for viruses, even test virus cant clean it, however sophos can clean it, below is an example 7 Nov 2014 15:00:06 (GMT +02:00)Message 329833 scanned by Anti-Virus engine McAfee. Interim verdict: CLE...

Hello everybody: I have the following error when I try to send an email through an ESA, the email was encrypted using IEA Mon Dec  1 11:45:35 2014 Info: Connection Error: DCID: 9527 domain: gmail.com IP: 74.125.131.26 port: 25 details: 421-'4.7.0 [20...

I need to know if it would be possible to keep track of the whole email in the appliance not only the message tracking (which contains the Processing details only without the email Body) And I also need to know if it is possible to resend an email fr...