Email Security

hi there, was just asked to create a possible block for email in regards to the most recent Apple IOS IOC's.It has been running now for 2 hours and already caught one "bad" email adressed to an IPhone user. AppleIOSTextDetectv2: if recv-listener == "...

Hi,today we started evaluating the ESA AMP File Reputation service. I was really surprised to find that the only options available to deal with malicious emails are "drop" and "deliver as is". No quarantine. Why, Cisco. Why? :-/Surprises aside, there...

Hello, We would like to get SSO working for logging into SMA. We currently have is setup for Spam Quarantine in SMA but would like to get it working for the Administrative side. I followed the instructions that were provided in Ver 13 for ESA SSO, ch...

I need to know if it is possible to use TLS for outgoing mail by using a content filter and maybe mail flowpolicy ?I'm aware of destination controll how it works for outgoing mail.An example, if I have outgoing mail with header "important" I would li...

Hi everyone I hope you can assist me here, we have been utilising CRES for several years successfully using the content filter option for activating the option for senders, however I have been asked about the functionality that is mentioned in the bl...

HelloHow dose virtual gateways works in a ESA Cluster?  Can you use one gateway att cluser level  and it applies to both machines?Or do you need to have one gate and Ip per unit? Regards//Andreas   

Hello,this is working fine:1) accept Query for Users and Members of MAILENABLE:(|(&(proxyAddresses=smtp:{a})(objectClass=user))(&(proxyAddresses=smtp:{a})(memberof=CN\3dMAILENABLE,DC\3dxx,DC\3dlocal)))so we can select exchange public Foldes and maile...

i have received RMA with C680 with 7.8.0-360 OS,as its EOL and my current ESA-cluster is on 12.5.anyone can help,what will be the upgrade path from 7.8.0-360,and from where i can download the OS.

Hi, I need some help with DMARC.  When I'm going to the Unclassified Quarantine, I have this message in some emails: Quarantine not found - DMARC,'DMARC' is referred by DMARC verification failed - Quarantined for DMARC verification failure. The actio...

Hello,I would like to understand how an ESA (on-Prem) can work in an Exchange Hybrid deployement.We have an Exchange server on site with some users (@domain.com),and an Office 365 setup where some other users are created.(also @domain.com)We also hav...

Hello, I got a problem with log that showing "Incoming connection (ICID 5686180) failed to receive mail. Queue Full". This log is repeated and the email is not sent. I use appliance C680 model. And also this Ironport is used to sent for Yahoo domain....

Estimados. Existe documentación que exponga beneficios y desventajas entre ambas tecnologías?. Como referencia encontré el siguiente cuadro, sin embargo me gustaría recabar mas información que justifique la diferencia de precio entre ambas soluciones...

Hello, I have a question about cisco amp and threat grid. Is it possible to block a mail when the file attachment analysis takes too long time, and then send a mail to alert about this analysis ? Regards