Policy Rule Best practices

[lsmarchig]

Hello,

When creating a policy rule for incoming emails, is there a best practice article? I am trying to determine if it would be best to use an AD group that would contain approximately 1000 users or if it would be better to add them to the rules recipient list individually. Which would be best from a resource perspective?  

thanks,

[Libin Varghese]

Hi,

There has been a defect filed for excessive entries in mail policy resulting in slow response of the GUI in a clustered environment.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCux92504/?reffering_site=dumpcr

There is certainly no limit for the number of entries allowed in the mail policy, however you would need to monitor the device for slowness once that is implemented.

Based on the above defect, if there are over 1000 entries I would certainly recommend using LDAP queries to match the policies to ease load on the appliance.

Thanks
Libin Varghese

[lsmarchig]

Great, thank you Libin for that information.

[Libin Varghese]

Not a problem. Glad to help.

- Libin V