cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
343
Views
0
Helpful
1
Replies

Scheduling Reports and Alerts in Cisco ESA (VM Based Deployment)

Hi Team,

Any one successfully configured scheduled reports and alerts on cisco Email security appliance(ESA) VM based deployment.

Regards,
Ramesh

1 Reply 1

wajidhassan
Level 4
Level 4

If you're deploying Cisco ESA (Email Security Appliance) as a VM and want to configure scheduled reports and alerts, here's how to do it correctly—this applies to appliances running AsyncOS 13.x and later:

1. Scheduled Reports
Standalone ESA (no SMA/Centralized Reporting)
Navigate to: Monitor → Scheduled Reports (for legacy/new UI, see chapter “Managing Reports”)


Click Add Scheduled Report

Choose report type, name, time range, format (PDF/CSV), schedule frequency, and recipients

Submit, then Commit to save

ESA includes several built‑in scheduled reports (like Executive Summary, Spam, Virus, etc.) that you can email or archive .

If Integrated with a Centralized Reporting System (SMA)
Scheduled reports are disabled on the ESA when centralized reporting to SMA is turned on .

In that case, create schedules on the SMA/Centralized Reporting platform instead.

2. Alerts Configuration
Via Web GUI
Go to System Administration → Alerts

Click Add Recipient, enter email, select alert type and severity (Critical, Warning, Informational).

Optionally adjust From address, duplicate suppression, and enable AutoSupport

Commit changes

Via CLI
bash
Copy
Edit
alertconfig
# Then follow prompts:
# - NEW (add recipient)
# - FROM (set from‑address)
# - severity/type settings
# - commit
This covers system and hardware/software alerts, but not report scheduling.

3. VM Deployment Specifics
VM-based ESA works identically to hardware units in functionality.

Just ensure:

Your SMTP settings (under System Setup) are correct for delivering both alerts and reports.

If the appliance is in a centralized reporting setup, scheduled reports are disabled on the ESA and must be configured on the centralized reporting system .
TL;DR
Feature Standalone ESA ESA with Centralized Reporting
Scheduled Reports Monitor → Scheduled Reports Disabled (configure on SMA)
Alerts Configuration System Admin → Alerts + CLI alertconfig Same

Still Not Seeing Options?
Ensure you're logged in as an admin-level user.

On desktops with high-resolution screens, some UI elements may appear off-screen—scroll down to reveal hidden tabs/menus.

Confirm AsyncOS version is 13.x or newer, since older versions had slightly different menus.