CES and LDAP routing

[RoBu]

Hi all,

we thought about using a LDAP based routing for the SMTP-Call-ahead like its described here in the user guide. 

So we can do the recipient validation like this:

domain1.com -> ask ldap.domain1.com

domain2.com -> ask ldap.domain2.com

domain3.com -> ask ldap.domain1.com

...

On our onprem ESA this works fine, but how could we implement this on a CES, where we dont have a LDAP server connected? We wont open our LDAPs to internet of course :)

Thanx 

RoB

[ppreenja · Accepted solution]

Hello RoB,

The Cloud Email Security (CES) appliances use the same software, so the LDAP setup would be the same. The only thing you would need to take into consideration is any firewall holes you may need to make in order to allow the LDAP traffic from CES into your environment. I would also highly recommend performing LDAP over SSL with our CES appliances for enhanced security.

However, since you have mentioned not allowing access to your LDAP servers in your environment from CES, you can request LDAP connector service from Cisco. For the same, please ensure you have received the CES LDAP Letter with the server and DN information. If you have not received this, please ensure you request the service from here: http://cs.co/ces-requests. If you have requested the service and not received the information, please reach out to ces-vpn-req@cisco.com.

Please check below articles for more details on the same:

https://docs.ces.cisco.com/docs/office-365-configuration-guide
https://docs.ces.cisco.com/docs/ces-instance-configuration
https://docs.ces.cisco.com/docs/ces-azure-to-ldap

I hope the above helps.

Cheers,
Pratham

[RoBu]

Thanx Pratham!