what are the best practice configuration for PTR verification in cisco ESA

[amahmud01]

Hi All,

what are the best practice or cisco recommended for PTR verification is it recommended to configure it for every email that comes in or only for suspicious emails that are throttled.

Thanks. 

[Ken Stieers · Accepted solution]

The last time this came up in this forum, most of us forego it... 

Too many people get it wrong.

Maybe with SPF/DKIM/DMARC getting more press that's gotten better, but I'm probably being optimistic. 

If you turn it on, I'd start with just tracking how much of your mail actually fails... it may not really help separate good from bad.  Then if you DO turn it on, I'd just throttle it.  

Again, too many out there get it wrong...