I downloaded the latest ESAv appliance, and installed it on a ESXi 6 installation (which I have done a few times in the past) using "Deploy OVF Template". I made the changes to the advanced configuration for the timer. When booting, I am getting: ...
Forum Posts
Hello, When we get a non-deliverable email we get the error message back , with a 35Kb attachment type subject.eml - but every email is the same size and when opened it has no contents. How do I attach the original, rejected, email to this error?
Hi,Good day I was trying to set-up Cisco ESA C390 in one our data center but I'm having issues establishing connections to external and public mail servers. Below is the error when I tested SMTP ping via CLI: Starting SMTP test of host alt1.gmail-smt...
Resolved! Add hash to headers
Hello,Is it possible to add the hash of an attachment calculated with AMP to the headers of the message?Martijn
Hello,Can anyone give me an idea or an advice on how to create a content filter within email security to mark or quarantine emails with non matching from headers. For example, I want to identify emails where I see these not matching headers: Message ...
Resolved! Forged Email Detection Question
We have a Dictionary setup with all of our Executives on it to protect us from receiving emails from people pretending to be our executives and this works great. I was wondering if it would be possible to do something like this with all users in our ...
Our security team has been seeing lots of malicious stuff coming through in excel spreadsheets that have older Excel 4.0 XLM macros in them. I saw a filter written like MacroFilter: if (attachment-filename == "(?i)\\.(xls|doc|ppt|xlsx|docx|pptx)$")...
We frequently receive Phishing emails with sender email address of the form: principalmail196@gmail.com Question: is there a way I can enter wildcards to match partial email address in a Cisco Email Security policy? For example, I would like to bl...
Hi, I am relatively new to Ironport but have invested quite some time in testing and reading the best practices and the documentation. I couldn't find/understand information regarding the different situations that we use Antispam setting options - in...
We've been attempting to use an Incoming Content Filter to handle a unique situation. We have an employee who left and in his departure, his e-mail now needs to be variably redirected between two people. Emails from a specific domain to the ex employ...
Hi Team, Is this the correct way to enable spam notification to be sent to specific group of users instead of all users? If I select "select users from ldap query" option notification are sent for only each individuals spam that are part of the ldap ...
Hello,We have a partner, that we send important emails, in a daily basis. Three or four days, he complains not receiving our emails, while in IronPort message tracking, we see that there no issue, with our emails, and all emails get queued for delive...
Hello,We have a Cisco Ironport C170 anti spam and we would like to know, when will be its end of life? and if we would receive security updates after that date or not?Thank you in advance
Hi,Does this new feature work for someone?I always get the error:--Extraction Failure. Reason : The password protected attachment 'Test.doc' could not be scanned successfully.
I've mapped out steps to set up SPF, DKIM and DMARC checking in our IronPort cluster, and run through them in test - the only problem I have is at the point where you export and re-import the DMARC profiles. It looks like the export works to create a...
