need the public key from the Ironport Device in X.509 format

[sv7]

Hi All,

Can anyone help me how to generate public key from the Ironport Device in X.509 format. If any document or video link please share.

[balaji.bandi]

what are you trying to do ? https decryption ?

https://www.youtube.com/watch?v=1g_96XYnkz4

[sv7]

@balaji.bandi 

yes TLS decryption between symantec dlp device and Cisco ESA.

[Ken Stieers]

To clarify, you are looking to decrypt the mail traffic?   If so, are you using the self-signed demo cert that the ESA created at install on your listeners? if so, they don't make that key available anywhere. 

If you're using a cert you installed, you can export it from the Gui, and use OpenSSL or Portecle or similar tools to split it out.