05-17-2017 03:29 AM
Hi,
I've just inherited some security requirements on our C300V mail appliances. I have, pretty much zero experience with CISCO technologies, so please bear with me if i get terminology or technical capabilities wrong.
I'd like to separate our email user base into groups nothing too complex, basically two groups;
1. Group containing users who, by the nature of their job role, process a high volume of email traffic. This group would be exempt from restrictions on email volumes of any sort.
2. A second group with the remaining user base, who would be subject to restrictions.
My question is; how east is this to achieve, and by someone who has no practical experience with CISCO products?
Thanks in advance.
Rob.
Solved! Go to Solution.
05-18-2017 05:59 AM
Hi Rob,
As mentioned the rate limit is applied on the connection from the server, hence HAT only accepts entries for the server IP or FQDN hostname.
Entering the domain name within HAT would not work.
Once you edit the mail flow policy associated with the HAT sendergroup for the server sending these emails you would see "Rate Limiting for Envelope Sender" which can be modified as per your requirement and exception email addresses can be added to an "Address List".
Thank You!
Libin Varghese
05-17-2017 06:24 AM
Hi Rob,
Rate limiting on the ESA is applied at the connection level when the sending server initially creates a connection with the ESA to inject emails.
The configuration is done from the GUI under Mail Policies -> Mail Flow Policies.
An article for your reference:
http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118577-technote-esa-00.html
Thank You!
Libin Varghese
05-18-2017 05:44 AM
Hi Libin,
Thanks for the reply. I've followed the link the KB article and have found the HAT and have created my new senders group. However I can;t find a way to add individual mailboxes - I've only been able to add our email domain.
Is it possible to add individual mailboxes rather than than the email domain (am i right in thinking that it will reference all mailboxes within that domain?).
Thanks again.
Rob.
05-18-2017 05:59 AM
Hi Rob,
As mentioned the rate limit is applied on the connection from the server, hence HAT only accepts entries for the server IP or FQDN hostname.
Entering the domain name within HAT would not work.
Once you edit the mail flow policy associated with the HAT sendergroup for the server sending these emails you would see "Rate Limiting for Envelope Sender" which can be modified as per your requirement and exception email addresses can be added to an "Address List".
Thank You!
Libin Varghese
05-18-2017 06:12 AM
HI Libin,
I understand now. I was looking the wrong option. Which explains why I couldn't add individual mailboxes.
Thank you so much for your help!!!!
Rob
05-19-2017 12:05 PM
Glad to help.
- Libin V
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide