cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1958
Views
0
Helpful
2
Replies

Cisco Ironport Logging - Query

spisipati
Level 1
Level 1

Hello,

 

One External User (Gmail.com) send mail to our Internal User (Inbound Email) with JPG attachment of 500 KB.

When verified in the IronPort logs in SMA, we found that email was delivered successfully. Please find the log as shown below

Mail Summary

Received Time:

28 Feb 2018 10:20:04 (GMT)

MID:

xxxxxxxxx

Message Size:

587.4 (KB)

Subject:

test with attachment

Envelope Sender:

xxxx@gmail.com

Envelope Recipients:

xxxx@xxxx.com

Cisco IronPort Host:

xxxxxxxxxxxx

SMTP Auth User ID:

N/A

Attachments:

N/A   **** Attachment exists in this mail, but not displayed here

Processing Details

28 Feb 2018 10:20:05 (GMT)

Message 58638642 enqueued on incoming connection (ICID 0) from xxxx@gmail.com.

28 Feb 2018 10:20:05 (GMT)

Message 58638642 on incoming connection (ICID 0) added recipient (xxxx@xxxx.com).

28 Feb 2018 10:20:05 (GMT)

Message 58638642 contains attachment '20171026_100029.jpg'.

28 Feb 2018 10:20:05 (GMT)

Message 58638642 matched per-recipient policy Inbound Policy for inbound mail policies.

28 Feb 2018 10:20:10 (GMT)

Message 58638642 scanned by Anti-Spam engine: CASE. Interim verdict: Negative

28 Feb 2018 10:20:10 (GMT)

Message 58638642 scanned by Anti-Spam engine CASE. Interim verdict: definitely negative.

28 Feb 2018 10:20:10 (GMT)

Message 58638642 scanned by Anti-Spam engine: CASE. Final verdict: Negative

28 Feb 2018 10:20:10 (GMT)

Message 58638642 scanned by Anti-Virus engine Sophos. Interim verdict: CLEAN

28 Feb 2018 10:20:10 (GMT)

Message 58638642 scanned by Anti-Virus engine. Final verdict: Negative

28 Feb 2018 10:20:10 (GMT)

Message 58638642 queued for delivery.

 

As per Mail Summary, Attachment Name missing.  As per Processing Details, Attachment scanned properly. How can we justify whether this email was delivered with attachment or not.

 

Thank you

 

Regards,

Srinivas P

1 Accepted Solution

Accepted Solutions

Libin Varghese
Cisco Employee
Cisco Employee

Message tracking details would display N/A for attachments if there are no filters added to scan attachments.

 

As long as you do not see the email being rewritten to a new MID the email would be delivered without modifications to the email body or attachment.

 

Regards 

Libin Varghese 

View solution in original post

2 Replies 2

Libin Varghese
Cisco Employee
Cisco Employee

Message tracking details would display N/A for attachments if there are no filters added to scan attachments.

 

As long as you do not see the email being rewritten to a new MID the email would be delivered without modifications to the email body or attachment.

 

Regards 

Libin Varghese 

Thanks Libin