ESA setup - best practices

[zappo0305]

I have 2 ESA (c370) running active/active setup. Currently each ESA configured to use only a single port for both inbound and outbound email. The other 3 ports are not in use. What are the best practices of setting up the ESA ?


Sent from Cisco Technical Support iPhone App

[Bob Fayne]

Interfaces- Only one of the three available Ethernet interfaces on the Cisco appliance is required

for most network environments. However, you can configure two Ethernet interfaces and segregate

your internal network from your external Internet network connection.

Source: ESA_8.0_User_Guide.pdf

You could potentially have low security, high security, and a management interface. Some networks need a physical connection into a dmz but if your environment doesn't need it there is no reason to use multiple interfaces.