Cisco Ironport content filters

[Kashif iqbal]

Our ironport content filter started dropping external emails all of the sudden .

It seems like some content filters update from cisco , Anyone experienced it ?

GMT 14:00 is the time when it started .

[Libin Varghese]

Hi Kashif,

Conditions for content filters are maintained by the device administrator directly on the appliance and not by Cisco.

Could you confirm from the message tracking details what filter is dropping the emails?

Updates are pushed by Cisco for anti-spam, anti-virus, graymail, AMP, outbreak filters, etc.

Thank You!

Libin Varghese

[Kashif iqbal]

the CF that dropped is called IMMED-DROP-CF

[Libin Varghese]

Please review the conditions for this incoming content filter and update as required.

Content filters as mentioned are not maintained by Cisco for on premise appliances.

If this is a cloud based appliance then you may need to open a TAC case to get that reviewed.

- Libin V