How does the Feature "TLS is Mandatory for Address List" work?

[Default0815]

Hi,

under "Mail Flow Policy - Security Feature"you can define a Address List of Domains.

But this does not seem to work. I put in the first Accepted Policy some test domains. Then i send some Test emails from this domains. But they were accepted without tls.

Do i have to define the HAT even if i put the Domain names here in this Adress list?

How does this Feature work?

[Libin Varghese · Accepted solution]

If you select Preferred, you can make TLS mandatory for envelope senders from a specific domain or with a specific email address by selecting an Address List that specifies those domains and email addresses. When an envelope sender matching a domain or address in this list tries to send a message over a connection that does not use TLS, the appliance rejects the connection and the sender will have to try again using TLS.

You may want to verify the mail flow policy this is configured on matches the policy matched on the test email.

Also, entries in address lists are case sensitive for certain mail flow policy configurations such as below:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCzv64845/?reffering_site=dumpcr

So you may want to compare the case displayed for the sending domain in message tracking with the entry in the address list.

Regards,

Libin Varghese

[Default0815]

Thank you.

Now it works.

We use Version 11.1. So there the bug seems to be fixed.