Email Security

I was wondering if anyone else has been seeing TLS errors on incoming email to an ESA on 8.0.0-617? The senders report this error "(Certificate rejected over TLS. (wrong cipher returned))" and in my logs I see this:(ICID xxx) TLS failed. Reason: (336...

  There is a company that regularly sends us email from a specific address, but it's being prepended with [SUSPICIOUS MESSAGE] and the URLs are being rewritten. How can I exempt this sender from this action? It looks like this would be a new Content ...

Bug in Message Tracking with messages that have high recipient counts?For the past couple of versions on our M670 we have noticied that if we try to show message tracking details for certain search results, the CPU will peg out to 100% on the M670 fo...

we have an ironport cluster that is currently open to anyone inside our network to relay to anyone inside or outside our IP space.  we force all external IP space to authenticate before they can send.we have about 200+ sub domains under our root doma...

Hi,I need your help regarding ESA. I have deployed  ESA in my LAN. I have installed two MDaeom Email software in different  machines and DNS. After installation, i have tried emails between two  different domains within LAN and its working fine. Afte...

I keep getting alerts from my Ironport equipment with the message: The Warning message is: The query Ironport.accept failed with result inquiry timed outAny one experience this before?Thanks for your anticipated feedback

As of 02/19/2014our Cisco ironport started getting failures on senderbase lookups: i.e.  SG UNKNOWNLIST match sbrs[none] SBRS unable to retrieve.... because DNS queries like 49.33.146.216.sb-adfe2ko9.senderbase.org are returning NXDOMAINThis has happ...

Hi there,I would like to implement a cluster of 2x Cisco IronPort ESA appliances in an Active/Active manner.It requires 4000 mail users, so how many license on each ESA appliance do I need to install? I suppose 2000 on each ESA.When one of the ESA fa...

At one of my client we are going to implememt Cisco ironport c300 device.Customer Demand to configure the two appliance in load balancing mode.Can Someone explain me what is difference between the devices in HA or Loadbalance mode.please share me the...

Hi,When I try to read an incoming secure message (CRES Registered Envelope) using a browser, I get the following error regarding missing permissions on a Postx jar:If I continue to run, I get the following second message. I cannot decrypted the messa...

       Changing netmask of an interface to 255.255.255.255, will make the interface inactive? Can we still use that interface to for routing emails?I using ESA C670 with AsyncOS 8.0.1

Just a FYI that after installing 8.0.0-671 on C670s I ran into an issue where it does not support userIDs longer than 16 characters.  This was allowed in previous versions as I have admins that use LDAP authentication with usesrIDs longer than 16 cha...

NowExchange---Ironport---InternetMust                        (vip@mydomain.com)Exchange---Ironport----Internet                           |                           |  10.0.2.188                           | ---Server---Internet                 (*@myd...