hi. yesterday i entered adobe.com and tried to login. but i forgot my password so i tried to recover password. i clicked "Recovery password" and it said it has sent recovery link to my corparate email. but i see nothing in email logs (monitoring trak...
Forum Posts
Resolved! ESA Outbound to third party
Hi,Long time ESA appliance administrator for our company that needs some help. I read through the guides but still am not clear on what to do. We are using an ESA C195 for inbound and outbound filtering of our Exchange 2016 on-premise server.So, I n...
Dears I have Cisco Ironport C170 which is retired but it have some very important logs about email which I would like not to loose them by pushing them to our SIEM and get copy of them. I can find Message Tracking logs and search about any email but...
We have multiple interfaces configured on our C695 appliances, only one of which has any kind of HTTPS enabled on it. However, all the interfaces which don't have HTTPS configured are set to use the Cisco default certificate, and the box to change th...
Is there a way to create a message filter that tags an incoming e-mail message to an ESA if for example the x-sender and return-path don't match? I would like to insert a header in those messages that I can catch with a content filter to insert a hea...
Hello,Please see below, i created a filter under content filtering to block any incoming email that has an HTML attachment. it's now for some reason blocking a lot of emails from many senders. although they are either allowed senders or just the bod...
Hello,In the past, we were told by Microsoft 365 to allow an IP range. We were told that we have to have 40.107.0.0/17 in our allowed list. However, every 2-3 days we receive SPAM emails and when we investigate the issue on IronPort we notice that th...
Resolved! When will Cisco C600V be end-of-support?
Hi there, I'm looking for end of fixes and security patch develoment date but It seems to be much harder than I suppose.Is there anywhere to check it?Thanks in advance for your help.
Dear all,We are in process of configuring external authentication using SAML and ADFS on ESA, but are having problems configuring IDP side. User guide for AsyncOS is pretty vague in that part, with sample custom rule returning error (it is obvious wh...
Dear all, I have configured External Threat Feeds on ESA appliances. I have integrated AilenVault open source TAXII server. However, I have two appliances which are connected to a cluster. On one appliance poll is successful every one hour. But on se...
Hello everyone,we´re currently searching a opputinity to handle massmaling.The goal is simple: send this mass mails out from a different interface.We have already the following Mailfilter:HighRiskDelivery-Massmail: if (rcpt-count > 20) AND (NOT (rcpt...
Hi all,we're using threadfeeds from hailataxii.com with cisco esa. But hailataxii.com doesn't seem to be available for some time (name does not resolve)-------------$ docker run --rm=true docker.io/eclecticiq/cabby:latest taxii-discovery --path http:...
Hello Cisco,since some day we get this error:07 Jun 2021 10:56:04 (GMT +02:00) Message 47730774 SPF: mailfrom identity >username<@cisco.com PermErrorDigging SPF Record cisco.com shows:cisco.com. 1799 IN TXT "v=spf1 include:mail.zendesk.com ?all" cis...
Resolved! ESA Cluster filters / CLI vs GUI
Hi all , it would be fine to help me out to understand using filters right: First of all we implemented some outgoing filters via GUI which ends for mails in e.g. a quarantine. So as some users a very fast in fill out phishing Emails it would be fin...
Hello,is it possible to enable incoming ICMP requests from internet. I can only ping the interface from my "local" network.
