For a long time we have blocked ".eml" attachments by extension for some email domains.  With the advancements in scanning techniques by the various filters in CES, what would be the risk of removing this?  Would a ".eml" attachment be scanned just a...

I have a request from our security team to write a filter to quarantine or block email with a couple conditions including what the dmarc result is.  The email is from a domain that is currently p=none.  Wondering if I can use the dmarc result in a fi...

I tried to open a case for one of our ESA appliances from the appliance yesterday at 10:41 EST.  I got the initial email from the appliance, but heard nothing additional back from Cisco.  When I went to Support Case Manager at https://mycase.cloudapp...

The URL www.cornerstonedeps.com is being scored as -6.2 currently.  Working with our SOC, they do not see any issues with that URL.  How do I report a possible incorrect URL reputation?  I added it to a bypass URL list but it still is causing Outbrea...

Our security team has noticed many BEC Email incidents where there is an attached PDF document with specific information in the MetaData.  Can we in some fashion filter on the ESA looking for email containing this Metadata in a PDF?