Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About dmccabej
Stats
Member since
11-12-2015
484
Posts
334
Helpful
70
Solutions
Created by
dmccabej
in Email Security
in Email Security
08-13-2019
11:04 AM
08-13-2019
11:04 AM
Hello,
The first thing you'll want to do is lower the outstanding request threshold down from 50 to 5. If you have multiple ESAs then it needs to be performed on each machine individually. More information on that can be found here: https://www.cisco.com/c/en/us/support/docs/field-notices/641/fn64111.html
That should take care of the bulk of the alerts and would be a good starting point.
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
08-13-2019
08:23 AM
08-13-2019
08:23 AM
Hello,
Can you share the output of websecurityadvancedconfig from the CLI?
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
08-12-2019
09:22 AM
08-12-2019
09:22 AM
Hello,
Postman can still be useful as it will allow you to export the request in multiple ways (one being cURL) which can be used elsewhere.
As an example, you could do something like this :
curl -sk -u admin:password https://<IPorFQDN>:<api-port>/sma/api/v2.0/config/system_time?device_type=sma {"data": {"timezone": "America/New_York", "continent": ["America", "United States", "New_York"], "time": "Mon Aug 12 12:18:07 2019 EDT"}}
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
08-04-2019
03:14 PM
08-04-2019
03:14 PM
Hello,
I apologize that you feel you haven't received adequate support on this topic. Are you referring to the Talos tickets? I'm not exactly sure how the Talos tickets are handled as I'm not on that team, but, when you open a ticket with Cisco TAC you should hopefully at least be able to gather some additional details. If you're able to provide me with an example I could send some feedback to the team.
Thanks!
-Dennis M.
... View more
08-02-2019
08:20 AM
Hello,
I would recommend reviewing the best practices guide for SPF, DKIM and DMARC. This should give some insight into the details you're looking for. You can also take a look at the information on the official DMARC.org website.
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
08-02-2019
08:13 AM
08-02-2019
08:13 AM
Hello,
If you mean blocked based on a negative reputation with Cisco (Talos), you can try submitting a ticket via the Talos Intelligence website. It also provides some additional details as to why your IP may have declined in reputation.
https://www.talosintelligence.com/reputation_center/support#reputation_center_support_ticket
If you're not able to get enough information through submission of a Talos ticket then you can always open a ticket with Cisco TAC and we can try to work with Talos directly to find out the why behind it.
Thanks!
-Dennis M.
... View more
08-02-2019
08:02 AM
Hello,
No, it should not impact any email traffic.
Yes, you can. You would need to choose the [N] option under certconfig --> setup. Then, you can choose separate certificates for each service. To utilize the current default demo certificate, simply grab the public/private keys from certconfig --> print.
Assuming the wildcard covers the proper FQDN you're using, yes.
Thanks!
-Dennis M.
... View more
07-18-2019
10:46 AM
Hello,
Quite a few things you can find out on the Internet for DNS round-robin, but, if you're looking for ESA AsyncOS specific details then we also have some information within the user guide(s) for how the priorities work and how the servers are queried.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-5/user_guide/b_ESA_Admin_Guide_12_5/b_ESA_Admin_Guide_12_1_chapter_0100010.html#con_1145602
Thanks!
-Dennis M.
... View more
07-17-2019
08:21 AM
Hello,
When you set all or multiple priorities to 0 it then attempts to balance the load of DNS requests in a round-robin type fashion. If you have maybe 1 or 2 ESA/s and a small volume of traffic, setting them as 0,1,2,3 or even 0,0,1,1 may not be that bad, but, when dealing with larger deployments you're going to want to make sure the DNS requests are balanced out as evenly as possible. The ESA relies heavily on DNS.
Keep in mind, this is also subjective to the number of resources available to your DNS server(s) and how well they respond to a large number of requests. Along with your network, Etc, Etc. So, your mileage may vary.
Thanks!
-Dennis M.
... View more
07-07-2019
04:57 PM
Hello,
It would be recommended to follow the guidelines and exclude any mentioned files from AMP4E scanning. It's known to wreak havoc on a system when exclusions are not put in place.
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
06-20-2019
03:32 PM
06-20-2019
03:32 PM
You're very welcome! :) I'm glad that I was able to assist.
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
06-20-2019
02:16 PM
06-20-2019
02:16 PM
Hello,
I believe the CxxxV devices will be getting auto-upgraded over the next couple of weeks. The management devices (MxxxV) are always upgraded first for compatibility purposes. You should be receiving email notifications when we schedule maintenance and upgrades. If not, I would advise reaching out to Cisco TAC and we can make sure we have your email address added to the appropriate mailers for this information.
As for manually upgrading, this is not possible as you do not have the appropriate permissions. Though, if you wish to schedule an upgrade to be done outside of the automated windows, you can once again reach out to Cisco TAC and we can provide assistance.
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
06-20-2019
02:03 PM
06-20-2019
02:03 PM
Hello,
It sounds like you may be running the command at the cluster level, and we would want to run showlicense at the machine level.
You could potentially try something like this.
clustermode machine esa.test.com; showlicense
Thanks!
-Dennis M.
... View more
Created by
dmccabej
in Email Security
in Email Security
06-18-2019
09:03 AM
06-18-2019
09:03 AM
Hello,
Thanks for the update. There is no variable specific to the VLN that I am aware of. In general, though, the VLN end date should be when the feature keys expire. You could potentially create a script to log in and run the showlicense command and grab the dates from there?
Thanks!
-Dennis M.
... View more
08-13-2019
Hello, The first thing you'll want to do is lower the outstanding
request threshold down from 50 to ...
08-13-2019
Hello, Can you share the output of websecurityadvancedconfig from the
CLI? Thanks! -Dennis M.
08-12-2019
Hello, Postman can still be useful as it will allow you to export the
request in multiple ways (one ...
08-04-2019
Hello, I apologize that you feel you haven't received adequate support
on this topic. Are you referr...
08-02-2019
Hello, I would recommend reviewing the best practices guide for SPF,
DKIM and DMARC. This should giv...
08-02-2019
Hello, If you mean blocked based on a negative reputation with Cisco
(Talos), you can try submitting...
08-02-2019
Hello, No, it should not impact any email traffic. Yes, you can. You
would need to choose the [N] op...
07-18-2019
Hello, Quite a few things you can find out on the Internet for DNS
round-robin, but, if you're looki...
07-17-2019
Hello, When you set all or multiple priorities to 0 it then attempts to
balance the load of DNS requ...
07-07-2019
Hello, It would be recommended to follow the guidelines and exclude any
mentioned files from AMP4E s...
06-20-2019
Hello, I believe the CxxxV devices will be getting auto-upgraded over
the next couple of weeks. The ...
06-20-2019
Hello, It sounds like you may be running the command at the cluster
level, and we would want to run ...
Public Statistics
| Date Registered | 11-12-2015 12:40 PM |
| Date Last Visited | 08-15-2019 11:36 PM |
| Total Messages Posted | 484 |
| Total Helpful Votes Received | 334 |
Helpful Votes From
