Important: Migrate from Secure Email Virtual C100V Models to Avoid McAfee-Related Issues Dear Valued Customer, We are reaching out to ensure your Cisco Secure Email environment continues to operate at optimal performance and reliability. As workloa...
Forum Posts
Our Cisco Secure Email Cloud Gateway (mx125.immenzaces.com, C600V) has two committed log subscriptions using Syslog Push over TCP to 223.177.121.15:514: "Mail_logs" (Consolidated Event Logs) and "mail_logs_nw" (IronPort Text Mail Logs). The port is r...
Hello,I've seen that IMS was EoS / EoL on cisco ESA. End-of-Sale and End-of-Life Announcement for the Cisco Secure Email Intelligent MultiScan (IMS) - CiscoWhat does it mean in terms of service?Since it was powerful as simple AntiSpam provided, does ...
Hi Attached Mail log which is bounced need reason and how to allow this email to be whitelisted.RegardsAjay Sharma
Hey everyone,I have noticed the bug with the ID CSCwr88508 which affects Sophos AV Scanning in AsyncOS 16.5 versions.To be honest, I don't really understand how a bug that could lead to delivery issues and with no workaround available be rated as sev...
Hello,Our Cisco Secure Email Gateways Virtual C600V running AsyncOS 16.0.4-302 also suffer from CSCwf38789. Furthermore, there is what seems to be a duplicate bug report? CSCwf38801 Would someone from Cisco's side kindly let us know when this issue i...
Wanted to post some experiences from this week dealing with CVE-2026-76461 in case it helps anybody here. This is a timeline of my experience with some technical IOC's for those who may want to go huntingFor background, my org has two clustered Ironp...
anyone who has encountered challenges upgrading ESA's Async OS to 15.5.5-014 ? on my case I keep getting an error message:ESA upgrade process fails with: “Failure downloading upgrade list: Failed to authenticate with manifest server,”
Just a heads up in case it saves someone else from a bad day. We upgraded to this release due to the SQL injection exploit and now are having major issues: -Much slower mail performance (connect times are 3 times slower across all of our ESA's) -Clus...
Hey everyone, CISA just added CVE-2026-76461, a severity 9.8 vuln to the Known Exploited list. https://www.cisa.gov/news-events/alerts/2026/09/14/cisa-adds-one-known-exploited-vulnerability-catalog fixed versions are listed in the Cisco doc here: h...
Hello everyone. We recently had 2 compromised mail accounts (user personal device compromised on Friday, 2026.09.04) and we ended up with our IP blacklisted on Cisco Talos. On Monday, 2026.09.07, we checked the logs, identified the compromised accoun...
This is also urgently needed from our side due to decreasing Certificate Lifetimes making it difficult to manage certificates manually across our infrastructure.
Hello, We have several customers who have this problem too. And it is annoying even though it is not critical for any function of the ESA. Can Cisco solve this? The message shows up under the "Certificate" also not only when you login. Cisco writes i...
Hello,I need to configure an Alternate SMTP Route for All SMTP traffic outbound when the Default SMTP Route fails.I currently have multiple static SMTP routes configured for specified domains, while I use the default SMTP route for all other outbound...
Can we implement a wildcard block on either SME/ESA or Umbrella, for all sender address originating from @weal0* and @ibkr0*
Hello,sometimes we see, even AMP has identified an attachment as "malicious", the mail is delivered to the user's inbox from the AMP quarantine on SMA. There is no indication of the behavior in the logs (per-day limit is also not reached at this time...
