08-14-2017 07:42 AM
I have 1 SMA and 2 ESA, everything is working fine like, reporting, filtering, PVO, etc.. except for the centralized quarantine, i have configured the centralized quarantine for both ESA and pointed it to SMA, but i am not seeing any quarantine email in my SMA. What could be the issue.
Whenever I click the Quarantine link from SMA, its showing that the page cannot be found.
Can anyone share with me the step-by-step configuration of Centralized quarantine INCLUDING TESTING..
Thanks,
08-14-2017 08:25 AM
Hi,
Step by step instructions for configuring centralized services are available in the end user guides.
https://www.cisco.com/c/dam/en/us/td/docs/security/security_management/sma/sma10-0/SMA_10-0_User_Guide.pdf
Setting Up the Centralized Spam Quarantine (Page 7-2)
Centralizing Policy, Virus, and Outbreak Quarantines (Page 8-3)
I would start by confirming if traffic is allowed from the ESA to the SMA to deliver emails to the quarantine.
Spam quarantine by default uses port 6025 and centralized PVO uses port 7025.
You can telnet to the SMA using the above ports to confirm connectivity.
For the page cannot be found error, you could try a different browser, confirm if http/https and spam quarantine access is enabled on the IP interface of the SMA.
Regards,
Libin Varghese
08-14-2017 09:11 AM
Please note that SMA and EsA are on the same vlan. And all http/https and spam quarantine are enabled. I have done the procedure in the end users guide but no luck.
whenever i opened the spam quarantine in sma it will open new browser pointing to https://sma:83, but no content, showing not found... i habe even change it to its IP address like https://1.1.1.1:83 but it didn't work as well.
08-14-2017 09:49 AM
If the spam quarantine URL displays page not found we would need to check the configuration on the SMA.
However, if the spam quarantine opens and just does not have any spam emails listed when you attempt to search that would indicate spam emails were not delivered to the SMA.
You can review the message tracking details for the spam emails to see if they were delivered to the SMA or sent to the local quarantine on the ESA.
- Libin V
08-14-2017 10:01 AM
Thanks livin,
where can i check if its not showing any page content in the URL?
can i have the troubleshooting docs for further message tracking to see the root cause of the issue.
thanks,
08-14-2017 10:05 AM
I do not see a troubleshooting article for this particular scenario.
You can certainly open a TAC case to get the SMA checked.
- Libin V
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide