About cyberurmel

cyberurmel · 08-22-2024

Hello , we have a cluster ESAs and one SMA all VMs . Updated the ESAs to Version: 15.5.1-055 ...no issues .. worked fineAfter that updated the SMA from :Version: 15.0.0-334 to AsyncOS 15.5.1 build 024 as offered as GD in the upgrade path. Update se...

cyberurmel · 04-18-2024

Hi all, i wonder if (and if yes how) its possible to combine a WhiteList Entry Server AND Mailadress. For example - we want to be sure that some mail adresses from a specific Server are whitelisted. Other Mails from this Server should be blocked and ...

cyberurmel · 03-05-2024

Hello all, i have a message filter set which allows only a max amount of mails in a time space and if they are more - then they are send to a quarantine. It works fine.. But now it exists a new mail-server for special messages only outgoing to world ...

cyberurmel · 04-06-2023

Hey all , we use a 2 machine cluster. I had to debug something and used this https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118233-technote-esa-00.html .. in the procedure i noticed that the cli ist not the same like in...

cyberurmel · 02-23-2023

Hi all, as i couldnt find it via the attachment filter / File Info. We got the information that a new way to infiltrate someone is to send .one (One Note) attachments. As they are not blocked by Macro i wonder if i can create a new Quarantine for th...

cyberurmel · 03-05-2024

Hello Ken, thanks first of all. My Code with help from the community here looks like that :if header-repeats('mail-from', 30,'outgoing') {notify("own.mailadress");notify ("$EnvelopeFrom");quarantine("SPAM");}how do you mean to adjust with exception f...

cyberurmel · 04-11-2023

I solved it.. deleted the in the log settings from gui the entry for the first machine..and it was inherited from cluster then.

cyberurmel · 02-27-2023

Ok..had a misstake now with this it seems to work:@cyberurmel wrote:Hi all, as i couldnt find it via the attachment filter / File Info. We got the information that a new way to infiltrate someone is to send .one (One Note) attachments. As they are n...

cyberurmel · 02-26-2023

Hi Ken, thanks first for reply. One Problem what i found as i did it like above. In the gui i have now unter rules :part of it below...but this also hits an attachment name where one its in the name.. where can i edit that with regex?thanks a lot if...

cyberurmel · 02-02-2023

Hi Ken, in additional to this for us great filter, i wonder if its possible to except some mails (whitelisting) ... so if some alarm should be sent (example to a service provider for some special machines) this wouldnt be great if they hang up in th...

Member Since	‎03-16-2017 04:10 AM
Date Last Visited	‎08-29-2024 05:47 AM
Posts	53
Total Helpful Votes Received	5

User Statistics

User Activity

SMA problem upgrade

How to combine White List Entry - Server AND Mailadress

Bypassing message filter

Misstake in log -how to revert it?

Best Practices attachment Filter

Re: Bypassing message filter

Re: Misstake in log -how to revert it?

Re: Best Practices attachment Filter

Re: Best Practices attachment Filter

Re: ESA Cluster filters / CLI vs GUI