04-19-2018 04:23 PM - edited 03-08-2019 07:36 PM
Hi, I don't have too much knowledge about Cisco ESA, and I'm currently trying to understand some ways of operation. Specially content filters.
When we associate content filters to a Mail Policy, does the order matter? Does the ESA start to check in a top-down order each content filter that is enabled? (and perform all the actions that are associated to each filter as long as it matches the condition?)
And if that is true, how can I create only one filter and stop in that filter? Would I have to place it at the top and then create an action that says something like "stop here, skip the rest and deliver now"?
Solved! Go to Solution.
04-19-2018 05:45 PM
04-19-2018 05:45 PM
04-20-2018 07:09 AM
Yes Mathew, thanks a lot.
I just had this scenario, where there is an Outgoing Mail Policy that has something like 20 Outgoing Content Filters. And one of those filters doesn't have any condition and the action is <sent the mail to an specific SMTP Server> So, basically, any mail that matches this Policy is always sent to this SMTP.
So, I want an specific mail (comming from an specific IP) to not be sent to that SMTP Server. So I guess I could place a new Content Filter at the top with a condition for that mail and an action that forces to skip the remaining filters.
In that case, I suppose ESA will try to deliver the mail in a normal way, by resolving the destination domain (MX register) and we will avoid redirecting it to the SMTP Server
Fabio
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide