I assume your email from outside isn't going directly to the Exchange, you are directing it from a FW or an external facing device, simply change the IP on the device to send the emails to the ESA, the IP that is the public listener if you have a two legged configuration. Then also add a SMTP route where to deliver the inbound emails for the accepted domain i.e youdomain.com 10.1.1.2 (exchange server IP). on the ESA.   On the receive connectors, generally no changes are required, unless the default has been modified.   The you'll need to modify the smart host on the exchange to send outbound emails to the ESA on the private listeners IP.    Remember to ensure your names match the SPF, MX and other records to avoid failing different security checks.   ... View more

Thanks, we get the notification, realized that for some unknown reason that the admin account isn't getting locked out, other account do, but not admin :(. I have opened a TAC case, thanks for the reply. ... View more

The answer to how it is identified, they are using Nessus Professional. ... View more

Thanks for the reply. The security department has a software analysis tool, I don’t have the details I’m curious to know if you upgrade from version AsyncOS 9.7 to version 11, does the FreeBSD also get upgraded or only patched. Version 9.7 was running was running FreeBSD 9.3 and version 11.0 should be running 10.0. I don’t know how to detect the underlying OS, so I can’t confirm in manually, to also test in my lab. See attached screen grab, sorry for the black blob, but you can understand 😊. [cid:image001.png@01D3AF45.B6EA02B0] ... View more

Hi, coming back to this again. In order to get FreeBSD 10.x, is it required to reinitialize the device, or with the upgrade is it applied. We are now running version 11 and noticed that the FreeBSD is still reported as version 9.3. I'm now trying to identify in the is a reporting error or something else.     ... View more

thanks ... View more

Does anyone have an idea when 10.x is to be released? Thanks Aditya and Mathew for the replies. ... View more

Nessus has identified that the version of FreeBSD is 9.2 and reports this finding as critical, as running an unsupported OS is non-PCI compliant. It is not a vulnerability (no CVE) but rather a finding. It is similar to running WindowsXP in a PCI environment. I do understand that AsyncOS is a modified version of FreeBSD but still it is up to audit interpretation if this is sufficient enough. ... View more