Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
To whom it may concern.
We've been testing the AMP feature on Cisco ESA.
Our testing results...
1) File upload limit.
Currently there is a file upload limit. This limit counts per 24 hours.
Model analysis_file_upload_thresholdC000V 10C100V 100C30...
Hi, I do this with a message filter. Something like:insert-all-spf-results:if (recv-listener == "InboundMail") {# based on http://en.wikipedia.org/wiki/Sender_Policy_Frameworkif (spf-status("mailfrom") == "Pass") { insert-header("X-IronPort-SPF-Resul...
Hi, I wouldn't recommend this but here we go.I'd create a message filter on node1 (clusterconfig switch to node1) to redirect all messages to cisco.com to node2 (alt-dsthost).Node2 will deliver tese messages like all others.Or create a specific SMTP ...
Yes, additional info: luckily Sophos does scan inside the winmail.dat file.
I was testing the Ironport AMP feature and found out that a virus in a winmail.dat is being ignored by AMP (it's also not uploaded). If Sophos doesn't recognize it, it will b...
