Cisco Cloud based email Security (L-S-CES-ESI-LIC=) and integration with ASA-5516x

[mithun_raam]

Hi all,

We are planning to purchase ASA 5516-x with firepower service appliances. We are considering email security feature as well. 

I really don't have clear idea on the Cloud based email security license (L-S-CES-ESI-LIC=) ?

Is it to be installed in ASA to support cloud based email security ?

how this cloud based email security works with ASA ? ( that means do we need to redirect all traffic or just like antivirus feature profile to enable on policies ? )

Please help me to understand this.

Thank you for the support in advance.

Mithun R.

[ppokhari]

Hi Mithun,

Cloud email security is a standalone product/service. You need to redirect your email traffic to CES which scans the email for spam/viruses etc. and delivers the clean email to mailbox.

For more details, please reach out to esa-tme or esa-pm alias.

Thanks,

Pradeep

[dmccabej]

Hello,

The ASA w/ FP would be completely separate from your Cloud Email Security (CES) appliance, along with its licensing. The CES device is hosted within one of ours and/or an AWS datacenter, which would act as a mail relay server between any external senders and your internal environment and/or vice versa from internal to external. The primary configuration change to accomplish this obviously being modifying your MX records to point to your CES hostnames, along with a few other DNS changes, setting up some NAT/allow rules on your ASA to allow traffic from CES, and of course configuring the CES devices themselves.

After you complete your CES purchase you will be contacted by one of our activation engineers who will assist you with basic configuration and initial setup.

Thanks!

-Dennis M.