We frequently receive Phishing emails with sender email address of the form: principalmail196@gmail.com Question: is there a way I can enter wildcards to match partial email address in a Cisco Email Security policy? For example, I would like to bl...
Cloud Gateway: 14.3.0-032Gateway (HW/Virtual): 14.2.2-004Email and Web Manager: 14.2.0-224Reporting Plug-in: 1.1.0.136Encryption Plug-in: 1.2.1.204Outlook Add-in(s): More info
Forum Posts
Hi, I am relatively new to Ironport but have invested quite some time in testing and reading the best practices and the documentation. I couldn't find/understand information regarding the different situations that we use Antispam setting options - in...
We've been attempting to use an Incoming Content Filter to handle a unique situation. We have an employee who left and in his departure, his e-mail now needs to be variably redirected between two people. Emails from a specific domain to the ex employ...
Hi Team, Is this the correct way to enable spam notification to be sent to specific group of users instead of all users? If I select "select users from ldap query" option notification are sent for only each individuals spam that are part of the ldap ...
Hello,We have a partner, that we send important emails, in a daily basis. Three or four days, he complains not receiving our emails, while in IronPort message tracking, we see that there no issue, with our emails, and all emails get queued for delive...
Hello,We have a Cisco Ironport C170 anti spam and we would like to know, when will be its end of life? and if we would receive security updates after that date or not?Thank you in advance
Hi,Does this new feature work for someone?I always get the error:--Extraction Failure. Reason : The password protected attachment 'Test.doc' could not be scanned successfully.
I've mapped out steps to set up SPF, DKIM and DMARC checking in our IronPort cluster, and run through them in test - the only problem I have is at the point where you export and re-import the DMARC profiles. It looks like the export works to create a...
Hi team, Our customer informs us that the Feature Key - Bounce Verification appears in Dormant state in the relay Ironport C370. What can this be due to? Thanks & Best Regards,JuanMi
Our Cisco C170 ESA (Version: 11.0.4-003) is randomly (apparently) ignoring some of the white listing we've put in place. We've opened a case with Cisco support, but I wanted to post on the forum as well. We only white list email addresses. Sometimes ...
Hi All, I am trying to setup an interface on a Cisco ESA which is for unauthenticated internal mail (SMTP) but has restrictions. I am trying to setup one of the two options; Option 1 - Do not accept email when the sender domain is not from an approve...
Resolved! "Mandatory TLS" header tag in Cisco ESA
I have enforced TLS on select domains on my ESA. I'd like to add a custom header tag on that says something like "Enforced TLS" to make it easier to see if an email came or went via enforced TLS vs. opportunistic. Is there a way to do it, preferably ...
Resolved! Incoming mail policy-anti-spam Actions for Positively Identified- spam quarantine in missing
Something change on the incoming mail policy.We want to change the configuration of the anti-spam policy for positive spam- from deliver to quarantine , but the option is not exist ,I can only choose - deliver ,drop ,bounce.Can any body explain me ...
We've enabled URL filtering, working great, but I want to log more information for the exceptions that I know are coming. I'm not getting the results I expect with my Add log entry action. My action step is: log-entry("$MatchedContent triggered $F...
Hi,We have a production ESA with many content filters and policies active in place. We would like to script a way to export and then import those filters\policies into our secondary DR ESA without going through the Web Gui front end. Is this possibl...
Recognize Your Peers
.jpg "VIP Advisor"){kind=icon}
