Cisco Iron Port - Message 3913388 aborted: Receiving aborted

[CLFrancisco]

Hi Team,

I just want to ask if what is the issue with this error in our email security inbound. 
The sender email is always aborted during transferring the email from outside going to our email server.
This is specific email only.
I already adjust the (Total Time Limit for All Inbound Connections) under network>listener from 15m to 1hour
I added also the domain on the whitelist even the domain email even the email is valid.

May I know the cause on this if this issue is on our side? or on the sender side?

Sample screenshot for your reference.

Thank you!

[Dustin Anderson]

I would do a mail log search on the ESA via SSH vs the CCSM search as it may not have all info.

My guess is you have around a 6 min email transfer time and they are not sending in that time so your system abandons the connection. Since it's just their email it would be a good bet it is their system causing the issues. 

[saliyev]

makes sense. connection aborted likely due to SMTP timeout. and ESA sends TCP RST.
you can also enable smtp log subscription and check SMTP conversation here.
For me it seems it lacks in DATA phase which could be due to networking issue. But smtp logs can give more visibility