Sender Verification

[ccna_security]

Dear all,

i configured Sender verification. The problem is that when blacklisted email send email to our company, i couldn't see it on message tracking logs. But i can find that rejected connection event in mail_logs.current file. Don't you think that message tracking events comes from mail_logs? How can i see the event in message tracking? 

If email comes from legitimate domain but by some problem it wouldn't be resolved, so email will be rejected. I want to see that logs to troubleshoot

[ppreenja]

Hi Ccns90,

You can see for the rejected connection details in the mail logs via CLI.
To check the same under message tracking, you can click on the "Advanced" option and select "Search rejected connections only" as seen in the attached screenshot.

I hope that helps!

Cheers,
Pratham

[ccna_security]

Hi Pratham

When i tried to search as you said i got such a messaje

Application Error

An application error has occurred and has been logged to the GUI log.

Return to the default screen.

[ppreenja]

Hi Ccn90,

This issue might be occuring due to the bug you are hitting as below:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp73547/

Currently, there is no workaround or known fixed release and hence you can subscribe yourself to the notifications for the same.

Cheers,
Pratham

[ccna_security]

Thanks Pratham. Is it possible to create log subscription in order to collect rejected logs?

[ppreenja · Accepted solution]

Hi,

There are no separate logs for rejected connections that I'm aware about, however, you can find the details on the rejected connections logs in the mail logs itself (Type- IronPort Text Mail Logs).

Cheers,
Pratham

[ccna_security]

Than you Pratham

[ppreenja]

No worries :)