How to check connection level failures at ESA

[bsrinu001]

Hi Team,

How to verify, the connection level failures? after hitting to ESA specifically before/After ICID has been created at ESA. 

[Libin Varghese]

ICID is created once a 3 way TCP handshake completes.

Anything before that would require you to set up packet capture on the ESA.

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117797-technote-esa-00.html

Packet captures are also useful for all other connection issues apart from reviewing mail_logs to confirm what the error is.

- Libin V