cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3290
Views
0
Helpful
5
Replies

User's Safelist Blocklist

jtsai8585
Level 1
Level 1

Can Admins access and modify individual's spam quarantine, safelist/blocklist? 

1 Accepted Solution

Accepted Solutions

Robert Sherwin
Cisco Employee
Cisco Employee

How to modify the End-User Safelist/Blocklist on ESA

The admin can directly see the SLBL and make modifications.

Administrators see and work with the superset of the same entries that each end user sees and works with.

An ESA administrator would need to:

1. log-in directly to the EUQ using their username/password, and then Options > Safelist or Blocklist

2. or... export the Safe/Blocked list to the .csv file.  

The .csv file export option is in System Administration > Configuration File and choose Backup/Backup Now.  The file is saved on the appliance and will need exported via FTP, or other file retrieval method from the appliance.  The file is saved to the configuration directory, and indicated by the file name saved as.  i.e., slbl-564D6C9B806B5719XXXX-57284F5DYYYY-20160203T141646.csv.

Looking into the file, you should see similar:


# File exported by the SL/BL at 20070922T012001
c=us;a=;p=test;o=exchange;s=smith;g=joe;, BLOCKED, black2@x.com
c=us;a=;p=test;o=exchange;s=smith;g=joe;, SAFE, white4@x.com, white5@x.com, white6@x.com, white3@x.com, white7@x.com
joe@exchange.test.com, BLOCKED, black2@x.com
joe@exchange.test.com, SAFE, white4@x.com, white5@x.com, white6@x.com, white3@x.com, white7@x.com
joe@testcom, BLOCKED, black2@x.com
joe@testcom, SAFE, white4@x.com, white5@x.com, white6@x.com, white3@x.com, white7@x.com
joe@test.com, BLOCKED, black2@x.com
joe@test.com, SAFE, white3@x.com, white4@x.com, white5@x.com, white6@x.com, white7@x.com

Once the file is modified, it can be loaded back to the ESA via the same method System Administration > Configuration File and Restore.

Hope that helps!

-Robert

View solution in original post

5 Replies 5

Robert Sherwin
Cisco Employee
Cisco Employee

How to modify the End-User Safelist/Blocklist on ESA

The admin can directly see the SLBL and make modifications.

Administrators see and work with the superset of the same entries that each end user sees and works with.

An ESA administrator would need to:

1. log-in directly to the EUQ using their username/password, and then Options > Safelist or Blocklist

2. or... export the Safe/Blocked list to the .csv file.  

The .csv file export option is in System Administration > Configuration File and choose Backup/Backup Now.  The file is saved on the appliance and will need exported via FTP, or other file retrieval method from the appliance.  The file is saved to the configuration directory, and indicated by the file name saved as.  i.e., slbl-564D6C9B806B5719XXXX-57284F5DYYYY-20160203T141646.csv.

Looking into the file, you should see similar:


# File exported by the SL/BL at 20070922T012001
c=us;a=;p=test;o=exchange;s=smith;g=joe;, BLOCKED, black2@x.com
c=us;a=;p=test;o=exchange;s=smith;g=joe;, SAFE, white4@x.com, white5@x.com, white6@x.com, white3@x.com, white7@x.com
joe@exchange.test.com, BLOCKED, black2@x.com
joe@exchange.test.com, SAFE, white4@x.com, white5@x.com, white6@x.com, white3@x.com, white7@x.com
joe@testcom, BLOCKED, black2@x.com
joe@testcom, SAFE, white4@x.com, white5@x.com, white6@x.com, white3@x.com, white7@x.com
joe@test.com, BLOCKED, black2@x.com
joe@test.com, SAFE, white3@x.com, white4@x.com, white5@x.com, white6@x.com, white7@x.com

Once the file is modified, it can be loaded back to the ESA via the same method System Administration > Configuration File and Restore.

Hope that helps!

-Robert

Interesting, I looked at ESA, it says user safelist\blocklist feature is disabled.   So I logged into SMA, the feature IS enabled and the System ADministration > Configuration File, backup is available.

However, I tested personal blocklist, it doesn't work....

15 minutes for replications is the reason....... working now.

Anyway to get this config off the appliance?  Our network team is blocking it and not willing to assist.

Under System Administration/Configuration File, you can backup the SLBL.

Then you can download it from the /configuration directory of the ESA (assuming you can FTP to it...)

You can upload and restore it on to other ESAs...

In ESA it's disabled, it is on the SMA.

I have no access to ftp or scp to the physical appliance.  Anyway to ftp out of the appliance?