Config ASA for outgoing emails from exchange server inside

[Eddie3]

Hi,

We have an ASA configured as shown in the attached PDF w/topology included. We are using an Exchange email server. We can receive emails, however, outgoing emails seem to just go nowhere. All other traffic seems to pass without issue. What am I missing from our config.

Thanks,

Eddie

[balaji.bandi]

try Disable ESMTP  and test

https://www.petenetlive.com/KB/Article/0000536

[Eddie3]

Hi BB,

That ESMTP issue has already been fixed in the ASA version I am running. See it in the config i included as:

policy-map type inspect esmtp tls-esmtp
parameters
allow-tls

Thanks for trying though.

Ed

[balaji.bandi]

I am sure your provider not blocking anything.

ok how about capturing debug and seeing what is the capture shows? and also try packet-tracer.

due to large ACL - I will review and let you now any of my findings.

[MHM Cisco World · Accepted solution]

policy-map type inspect esmtp _default_esmtp_map
 description Default ESMTP policy-map
 parameters
  mask-banner
  no mail-relay
  no special-character
  allow-tls
 match cmd line length gt 512
  drop-connection log
 match cmd RCPT count gt 100
  drop-connection log
 match body line length gt 998
  log
 match header line length gt 998
  drop-connection log
 match sender-address length gt 320
  drop-connection log
 match MIME filename length gt 255
  drop-connection log
 match ehlo-reply-parameter others
  mask

I find this policy for SMTP or ESMTP inspection, 
try this config.  

[Eddie3]

I have temporarily removed the esmtp inspection to eliminate it as a possible issue. Still cannot send any emails out. Hope that helps narrow it a bit, so we can concentrate on it being some other issue that has been missed.

Thanks,

Ed

[balaji.bandi]

have you enabled debug and capture what is wrong?

[MHM Cisco World]

if you run ESTMP with TLS then I think disable the inspection will not work, 
try my suggestion above and check again