Here is the section of the end-user guide regarding clustering for version 11.1: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_0101000.htmlYou should find a similar section...

I don't foresee any issues with this. As long as the ESA at site B can connect to the ESA's in site A via SSH (or CCS port 2222 if you are using that) and visa versa, you should be fine. Just know that each device will maintain a connection to all th...

It sounds like these messages are false positive graymail. If that's the case, the best way to address these false positives is to submit the messages to Cisco so we can update the graymail rules.The following article explains how to submit false pos...

I know this has been posted quite awhile ago. But I wanted to give a response anyways. When enabling DMARC verification on a mail flow policy, the ESA will do DMARC verification regardless of if the domain is internal or not.

9 times out of 10, this is referring to the URL filtering service restarting.Field notice FN64111 has been known to cause python (URL filtering) to restart. So, I would recommend that you apply the config change at the bottom of FN64111 and monitor f...