DKIM failure auto reply from ESA

[maraz]

Hello, we have a problem with auto reply messages on the Cisco ESA. It is only the generated auto replies from the ESA that seem to get the DKIM errors. Could this be a configuration error?

[Ken Stieers]

Could be. In the gui, under Mail Policies/Signing Profiles, at the bottom there's a section for DKIM Global Settings. One of those setting is "DKIM Signing of System Generated Messages"
Turn that on... make sure that the domain the box is using for its 'from' address has a profile configured.

[maraz]

Hello, what do you mean with the last sentence?

[Ken Stieers]

Under System Administration/Return addresses, you set the return address for all of those messages.  That address will have a domain portion. 

Make sure you've set up a DKIM singing key and profile and require DNS records for that domain, if its not a domain that you've already set up.

[maraz]

They are using the same domain for their auto reply messages. And it is only their auto reply messages that get the DKIM failure. Can it be that the ESA after signing the message add something to the mails?