01-23-2017 05:30 AM
We are migrating to a cloud vendor for email.
Some of our internal systems still send mail to the internet. We have not enabled
How do I sync
01-24-2017 11:59 PM
You don't have to dkim sign your email on your Ironports if you don't want to.
Also the keys do not have to be synchronised. Your cloud provider can use one set of DKIM signing keys and your Ironports their own DKIM signing keys. In fact, this is highly likely to be the way it would be done.
03-17-2017 08:21 AM
OK, follow up question.
We are trying to enforce DMARC.
I have DKIM signing enabled everywhere I can see on the Ironports.
My signing profile is for domain.com. Is it case sensitive?
03-19-2017 04:56 PM
Hello,
The reason you're seeing this message is because the ESA is checking for both a DomainKeys /and/ a DKIM profile prior to signing the message. As long as you have DKIM setup successfully you should see this message along with a successful DKIM signing right after. If that is the case then you can ignore the DomainKeys log as it's non-impacting.
You should see something similar to the following :
DKIM: signing with dkim-sign - matches user@domain.com
Thanks!
-Dennis M.
03-09-2025 06:50 PM
I am having issue of getting DKIM to work on Cisco ESA for outgoing email.
I get the “dkim permerror” below.
Email Setup:
MTA (Relay Host) -> ESA (Relay Server) -> Internet. MTA sits behind the ESA.
For Outgoing Email, does the MTA perform DKIM Signing or ESA or both? Can you please advise which method is the best practice.
May I please seek your assistance.
03-09-2025 08:15 PM
03-25-2025 06:38 PM - edited 03-25-2025 07:03 PM
Hi Ken,
My apologies for a delayed response.
Good advice, I will disable the DKIM signing on the "MTA (Relay Host)", the Originating Internal MTA.
I will double check.
I recall I published a dkim dns entry on the internal dns server for the "MTA (Relay Host)", and a different dkim entry on the external dns server (Internet facing), for the ESA (last hop outbound) dkim signing .
PLEAS NOTE: this topology is in a lab environment to simulate Internet Mail.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide