To whom it may concern.
We've been testing the AMP feature on Cisco ESA.
Our testing results...
1) File upload limit.
Currently there is a file upload limit. This limit counts per 24 hours.
Model analysis_file_upload_thresholdC000V 10C100V 100C30...
Hi, I do this with a message filter. Something like:insert-all-spf-results:if (recv-listener == "InboundMail") {# based on http://en.wikipedia.org/wiki/Sender_Policy_Frameworkif (spf-status("mailfrom") == "Pass") { insert-header("X-IronPort-SPF-Resul...
Hi, I wouldn't recommend this but here we go.I'd create a message filter on node1 (clusterconfig switch to node1) to redirect all messages to cisco.com to node2 (alt-dsthost).Node2 will deliver tese messages like all others.Or create a specific SMTP ...
Yes, additional info: luckily Sophos does scan inside the winmail.dat file.
I was testing the Ironport AMP feature and found out that a virus in a winmail.dat is being ignored by AMP (it's also not uploaded). If Sophos doesn't recognize it, it will b...
