About Mladen

Mladen · 05-08-2026

Hello Team,Does somebody has more experience using DNSBL provided by the Spamhaus? I have noticed one issue, if Spamhaus returns an error code, for example 127.255.255.254, my Cisco ESA cluster ( ver 16.0.4) treats this return code as "MATCH" which e...

Mladen · 03-05-2026

Hello Team, Just a question, we have an integration between Cisco ISE (3.4p4) and Microsoft ADFS Single-Sign-On (SSO) which is used as external identity source (SAML Id Providers) for Sponsor portal login. ADFS is using self-signed signing certificat...

Mladen · 05-11-2026

Thanks Ken,exactly as you stated, DNS Lists in HAT have a strictly Boolean logic, you cannot differentiate based on the return code:https://www.cisco.com/c/en/us/td/docs/security/esa/esa16-0-3/user_guide/b_ESA_Admin_Guide_16-0-3/b_ESA_Admin_Guide_12_...

Mladen · 05-08-2026

Hello Ken,Thanks for the tip. I am using DNSBL in the sender groups (actually I have just temporarily removed spamhaus DNSBL due to increased number of false positives). I agree with you, this could even be some bug. I will search the documentation f...

Mladen · 10-14-2022

Thanks @Tsiry , could you please tell me to which verson you have upgraded?

Mladen · 10-14-2022

Hi @Tsiry did you solved the issue? I am also running Firepower 2110 and 1120 (both running version 6.6.5.2) and I am facing the same issue with unexpected reboots. Maybe an upgrade to 6.6.7 can solve the issue?

Member Since	‎10-12-2017 12:10 AM
Date Last Visited	‎05-15-2026 06:27 AM
Posts	6

User Statistics

User Activity

ESA DNSBL, Spamhaus return code 127.255.255.254 considered as "MATCH"

Cisco ISE SAML - renew ADFS SSO signing certificate

Re: ESA DNSBL, Spamhaus return code 127.255.255.254 considered as &quo

Re: ESA DNSBL, Spamhaus return code 127.255.255.254 considered as &quo

Re: CSCvu84127 - Firepower may reboot for no apparent reason

Re: CSCvu84127 - Firepower may reboot for no apparent reason