Hello - I'm working on an ESA C170, firmware version is 11.0.0-274. Troubleshooting a 2-5 minute inbound mail delay.Below is an example log entry, message arrives at 11:09:33, and is sent to the mailbox at 11:11:16. Seems like the delay is due to the...
Forum Posts
Hello, we don't use Management interface (cable unplugged), only Data 1.Is possible enable trailblazer en Data 1 interface?In Management interface, unchecked AsyncOS API HTTPSIn Data 1 interface, checked HTTPS Appliance Management, AsyncOS API HTTPS ...
Hi, I'm trying to understand what an user is for Cisco ESA licensing. What of theses types would require a user for a license?MS Exchange User Mailbox - a user mailbox with a real named user behind it or can be accessed by a system using the passwor...
Recently I have upgraded a few machines with O365 from the old Email Security Button 7.5 to the newer 1.2 version. On the machines that I have upgraded they receive the following error when outlook is fully loaded: "Daemon Command Failed". Sometimes ...
Hello,I'm looking to use my FTD device as an SMTP relay/gateway. Do I just create a 1:1 NAT for this or is there an easier way.I'm coming from a Sophos UTM firewall. On there, I just needed to clarify the Email Domain "fax.core.com" and pointed it t...
Resolved! Feature key description
Greetings!I would like to ask about perpetual feature key(Incoming Mail Handling, Bounce Verification). What kind of the email security appliance functionality does each key permits? Actually I am interested in the masquerading and domain mapping fea...
Hi, I was under the impression that content filter are processed for individual recipients. In the user guide is stated:"Content filters scan messages on a per-user (sender or recipient) basis.".However when I read the text for the rcpt-to condition ...
Hi there, can someone help me how to renew Cluster Certificate on cluster. and what will impact if it fails.
Hello, recently I upgraded SMA to 13.6.1ESA to 13.5.1 Im wondering, why the statistics to "Stopped by reputation" are so low since then (see attached)
Hi I'm new to regex.How to add a condition in a filter to block emails with similar text in the subject:Nancy Reardon sent you "PO-09507.pdf"Andrew Beverley sent you "PO-124.pdf"larry noble sent you "PO-110.pdf"Tony Flinn sent you "PO-09522.pdf"
Hello experts,We are successfully marking external emails with the [EXTERNAL] tag for emails unless the email is in plain text. Is anyone else having this issue?Thanks.Update: Thanks for the walk through. I'm going to check with our email team to ma...
Hello, I wanted to ask a question regarding Cisco SMA message tracking in my customer environment. In the ESA, we have 2 outgoing policies, whitelist and blocking policy, and the email is sent to multiple recipients which splintered the message to bo...
Resolved! Wildcards in safelist
Is it possible to use wildcards/regex in SLBL? Like, for example, allow all senderdomain.com to be safelisted for all my users of recipientdomain.org
If we whitelist sender/domain/IP Address in the HAT and also in the Incoming mail policy, how mail will be processed ?What will take precedence ?
Hello all, I've got a strange behavior, I don't know if t is normal.Multiple times a day (like a hundred) we observe logs in AMP stating first that the recommended action for the file is to send the file for analysis, and then that the fils was not s...
