Also searching using GC will look across all domains - if you are having trouble finding users use the GC port.More information is found in the KB"NOTE: If your Active Directory implementation contains subdomains, you will not be able to query for us...
Also don't forget to apply it to a mail flow policy that the mail will actually apply to if using multiple mail flow policies.The ironport will do a first match on mail flow policies, so if you have multiple policies setup and you want to block only ...
Did you ever get this figured out?If not i would verify you have firewall rules in place to allow connections both from and to the ironport on port 25 for smtp traffic.Ran into that issue a little while ago on an eval install i was doing for a custom...