Email Security

Hi, Is anyone else having problems with doing TLS as preferred? We have found this issue:1) if the remote site offers TLS but it does not work, the Ironport is unable to send the email and eventually it gets too old and is return to the sender as und...

we have a wild card SSL certificate for our domain (InstantSSL one) but it requires an intermediate CA certificate to be installed.does anyone know if this kind of certificate can be installed? I can install the wildcard cert but IE throws up an erro...

Has anyone had any success with lowering this score from the default of 75. Just curious as to what other companies are using for their threshold.

We would like to send a copy of all NDRs, DSNs, etc. to a particular email address. How would you handle that? I thought I could do it through bounceconfig as there is an option, "Do you want hard bounces sent to an alternate address?" but that redi...

Using an Alias table lookup running on mysql, how does one prevent backscatter from forged or virus emails?TIA,~Vern

Folks,1) smtpauth with ldap should be binding rather than retrieving password. Since userPassword is a multi-values attribute (SunDS), when grabbing the password to check, the DS returns the newest one first and auth fails. We have multiple passwor...

How many people are using Domain Keys? How are you currently implementing this authentication for mail you are sending?~Vern

So, I thought I'd try out a poll, and see what features people would like to see in the IronPort C-Series applicances...Not sure how the poll functions works, and if other people can add options, I guess we'll see.For me, I *definitely* want to see c...

I'm curious what types of policies the IronPort Nation has set up based on the SenderBase Reputation Score (SBRS)With the release of AsyncOS 4.0, we changed the recommended score to block connections to -4 (from -7), but I've seen all types of polici...

This is our current sender group order. Does it make sense?Internal machines that are allowed to relay through IronPort WHITELIST: TRUSTED Trusted senders have no Brightmail or rate limiting ManualBlock: BLOCKED manual blocks, and really b...

I grew tired of getting complaints from upper management whenever our mail server's performance degraded. In every case, I could trace the problem to one or more messages containing huge attachments (>10MB), and they almost never were business-relate...

You need top do this in the policy configuration (policyconfig --> Incoming or Outgoing--> filters) or you can do it in the GUI (Mail Policies --> Incoming/Outgoing Content Filters) since the X-IronPort-AV doesn't get added until the virus checker r...

We have recently gotten a lot of complaints from users who say that we are blocking their attachments even though it is not on the list of attachments we say that we block. After a little investigation we found that these users had installed an Outl...

This section is to share real-world stories about how folks have configured their IronPorts. What really works (or doesn't) out there in the IronPort Nation?

Mark, sorry should have given you this list months ago. My guess is you've already thought of all of these and more.Everyone else, feel free to add to the list or tell me I'm nuts... or better yet ask what for.1) A good DHAP (directory harvest attac...