ESA en user spam quarantine access

[ccna_security]

Hello. i need urgent help. we configured spam quarantine to be accessible to all end users. but when they get notification about blocked spam they click the link and forwarded to spam quarantine web page. when they enter their username and password it says username and password wrong. But when i enter administrative credentials to login page i can enter. could any one tell me why end-users couldnt enter their quarantine with LDAP credentials?

[Ken Stieers]

In the System config/LDAP make sure your LDAP profile has the End User Quarantine and Quarantine Consolidation boxes checked. Test them

Then in the Spam Quarantine config pick the two queries.

[ccna_security]

Hello Ken

In the End User Quarantine Access settings, i choosed LDAP

System Administration > LDAP > LDAP Server Profile page ->Spam Quarantine End-User Authentication Query-ON

Monitor > Spam Quarantine -> End-User Quarantine Access- > Selected

Enable Spam Notification -> ON

my configuration shown above. please write back any recommendation regarding our issue.

I want to ask why I have to check Quarantine Consolidation box?what is used for?

Please make this "
Then in the Spam Quarantine config pick the two queries." a bit clear.

[Ken Stieers]

The consolidation query is so spam sent to someone with multiple email addresses can be accessed with one login. For example: People who get married and change their name, so you change add an email address with the new last name.

I think it's under Monitor/Spam Quarantine, in the configuration of the quarantine, tou.set which queries to use for login and maybe consolidation. It's on the same page as you set when the quarantine sends out the email, etc...

[ccna_security]

Thank you for explanation. Please explain me why our user is unable to enter their quarantine. When they click link they see spam quarantine we page but when they enter their ldap credentials they fail

[Ken Stieers]

In the ldap config you can test the query and it will give you more info.

Also there are LDAP logs that may tell you what's happening.

[ccna_security]

Actually  i configure esa as admisintrator. And when test ldap query it showws success. 

[Ken Stieers · Accepted solution]

In the area where you configure it you can test it. You can enter a user ID and password and it will tell you if its successful.


Also check the boxes there to mark them as the Active query

[ccna_security]

Thank you Ken. i want to add the link below that would help others who has same issue

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html