Cisco ESA doesn't send an email notify for SPAM

[huseyin]

Hi everyone,

I install ESA on my LAB. I finished all configurations for example; LDAP, Query, Policy, Services enable, etc. For this reason; ESA captured SPAM emails and categorised them. I found all the spam emails on Message Tracking. But ESA doesn't send any notification emails. 

What am I missing? Any idea?

Regards

[Ken Stieers]

Assuming a single ESA, and no SMA, in the GUI, under Monitor/Spam Quarantine you can enable the quarantine, enable end-user access and enable end-user notification.

[huseyin]

Hi Ken, 

Thanks a lot for asking.

I found my way or solutions. Actually, that problem was Query Describes. I tried differents a lot of methods and Finally, Spam Notification worked! If you want I can share my right query methods.

Regards.

[Densha Otoko]

Hi Huseyin

Appreciate if you can share the right query method thank you

[Ken Stieers]

Using AD as the LDAP source, the query string we use is:

(|(proxyAddresses={a})(proxyAddresses=smtp:{a}))

and the Email Attribute is "mail"

[Densha Otoko]

Thank you very much Ken

[huseyin]

Hello Densha,

Off course I can;

*** Accept Query (click selected)
for email address verification

Name
xxxx

Query String
(|(mail={a})(proxyAddresses=smtp:{a}))
mail 
proxyAddresses=smtp:{a} for proxy use
(|(mail={a})(mail={a}))

*** Routing Query (not selectl)

Name
xxxx

Query String
(mailLocalAddress={a})

Recipient Email to Rewrite
the Envelope Recipient:
mailRoutingAddress

Alternative Mailhost Attribute:
mailHost

SMTP Call-Ahead Server Attribute (optional):

*** Group Query (selected)
for end user group verification

Name
xxxx

Query String
(&(memberOf={g})(proxyAddresses=smtp:{a}))
memberOf --> g

proxyAddresses=smtp:{a} 

(&(memberOf={g})(mail={a}))

for verification;
CN=Group,CN=Users,DC=xxx,DC=com,DC=tr

for Active Directory 
DC=xxx,DC=com,DC=tr

*** SMTP Authentication Query (selected)
for end user name and password verification

Name
xxxx
Query String
(sAMAccountName={u})
Authentication Method:
Authenticate via LDAP BIND

*** Spam Quarantine End-User Authentication Query (selected)
for using SPAM access End user 

Name
xxxxxx
Designate as the active query --> !!!must be selected!!!
Query String
(sAMAccountName={u})
Email Attribute(s):
mail

[Densha Otoko]

Thank you very much Huseyin
Really appreciate it