Hi everyone, I install ESA on my LAB. I finished all configurations for example; LDAP, Query, Policy, Services enable, etc. For this reason; ESA captured SPAM emails and categorised them. I found all the spam emails on Message Tracking. But ESA doesn...
Forum Posts
Hi, 2 issues have arose the past week where the firepower has been blocking legitimate SMTP traffic.ISSUE 1I upgraded from SNORT 2 to SNORT 3. Most of our Company emails were then blocked (Incoming & outgoing). The Intrusion logs showed this traffi...
are clients Domain is being blocked due to the error 550 5.0.350 Remote server returned an error -> 554 Your access to this mail system has been rejected due to poor reputation of a domain used in message transfer no matter what i do i cannot get thi...
Hi, I am looking for a solution which will block/rebound/reroute an email if the recipients belong to more than one domain.For example, if the recipients are alice@domain.com, bob@domain2.com, cathy@domain.com - The email will be blocked/rebound/rero...
Hi, what could be reason for SPF mailfrom identity = None? There are multiple emails sent from same sender, using same sender email server etc. Some messages passed successfully (SPF aligned True), some are moved to quarantine (SPF aligned False).The...
Get the following warning as mail alert, but can' find anything in Log-Files:The mcafee was restarted due to an error. A debug file was generated for troubleshooting. Please contact your authorized support center.Does anyone knows, what to do?
Hello, there is a c195 on-prem and the contract (anti spam subscription) is running out end of march. (based on the automatic emails we receive)If I connect to the device and goto system administration, feature key: there is end of april.ASK Suppor...
Hello, there is v14 Firmware OS on C195 with active Subscription (antispam), but runtime will be finished soon.The new licence will be issued on the expiry date. (cisco standard)We would prefer classic pak. Smart Licence is not enabled on the device...
Hello, I want to whitelist a couple of IP addresses and exclude them from any spam filter, phishing and antivirus scanning I have a sender group called BYPASS_SBRS_SPAM, which I guess I can use for bypassing the spamfilter, but how about allowing the...
I was reading about the newest email protection standard. Can you say if this will be implemented on the IronPorts? https://www.dmarcanalyzer.com/arc-is-here/ Thanks!
Example I have an photocopy machine, web application and hmail server that sending email to gmail.com. These application are non TLS and not secure using SMTP port 25. I want to put in a ESA and when the mail sending to ESA and I want ESA to send out...
Resolved! SMA Migration M380 to M695
Hi all, I am planning to set up a M695 as a target appliance. And using the command backupconfig to transfer data from source appliance (M380). I have questions regarding availability of services during backups. As from the documentations, during pha...
Hello team, I need to configure in antispam policy the "Send to an Alternate Envelope Recipient" option, in the same domain. The problem is that the mail is generated for the alternative recipient but it is blocked as as spam. I have tried to create ...
Hi Team,We are currently working on parsing ESA CEF events for SIEM integration. From the sample log mentioned in the docs, we found that msg fields are encoded with either ' (Single quote) or " (Double quotes) generally.Ex.Thu Jun 30 08:04:50 2022: ...
Hello, I have a question concerning External Threat Feed Sources on HAT. If I create a new Sender Group for example with IP 1.2.3.4. With also SBRS -10 to -5. And also an ETF configured on this Sender group. Do Sender Group AND SBRS AND ETF have to m...
