Email Security

Hi I'm new to regex.How to add a condition in a filter to block emails with similar text in the subject:Nancy Reardon sent you "PO-09507.pdf"Andrew Beverley sent you "PO-124.pdf"larry noble sent you "PO-110.pdf"Tony Flinn sent you "PO-09522.pdf" 

Hello experts,We are successfully marking external emails with the [EXTERNAL] tag for emails unless the email is in plain text. Is anyone else having this issue?Thanks.Update: Thanks for the walk through.  I'm going to check with our email team to ma...

If we whitelist sender/domain/IP Address in the HAT and also in the Incoming mail policy, how mail will be processed ?What will take precedence ?

Hello all, I've got a strange behavior, I don't know if t is normal.Multiple times a day (like a hundred) we observe logs in AMP stating first that the recommended action for the file is to send the file for analysis, and then that the fils was not s...

Whenever I send an email to a specific yahoo email user with some attachment, the email was bounced with the following error. What is the probable solution?5.3.0 - Other mail system problem 554-Message not accepted due to failed RFC compliance

Hican any body know ironport listen port 587, We have requirement ,external parter want to send mail our domain , they have restriction on their firewall they are allow port 587 instead of 25. could you please suggest what need to do to allow that pa...

Hi, I have a defang rule for incoming email in Cisco cESA (as per screenshot, just example). There are times when incoming email hit default policy, the defang rule will take action and defang the URL inside the email even though the domain of sender...

Hello everyoneI know that minimum requirements needed to install the license of AMP in ESA appliance.I would like to know :Model ESAVersion AsyncOSRAMthanks to all

Hello,   We have to configure LACP on ESA and SMA and would like to check that is it available LACP configuration on Ironports? If it is not available, Can it configure with any type of Link Redundancy?   Thanks

In our existing virtual SMA appliance is in Internal zone and ESA appliances are in DMZ. We are now deploying a new SMA appliance as a replacing for our existing virtual SMA device.We are enabling secured centralised SPAM Quarantine access to employe...

Hi Fellows  one question , is ironport ESA suppoting automatic backup configuration file? i cant find anything about it , only a external script in Unix/Windows

Hello Guys, We are running on 11.0.0-264 which is pretty old and looking for a firmware upgrade on Cisco ESA Virtual Appliances I heard there are some cipher issues on version 13.X. What would be the most stable version of 13.X series firmware for Ci...