Mail queue started filling up on one of the Ironports after this alert. The url_rep_client was restarted due to an error. Looking at the logs I see this error. grep “unable to” mail_logs -t ACCEPT SG None match sbrs[none] SBRS unable to retrieve country unable to retrieve DNS checked out …
Tag: ESA
When you have trusted marketing company performing internal emailing campaign on your behalf their messages may get stuck in Ironport Graymail filtering engine. Especially if they rely on some other 3rd party company which sends these emails from shared hosting environment. Here is a message flagged as bulk. A closer …
It seems like every day I see a few phishing emails coming through despite multiple layers of security controls and rules in place and in these cases your users are the final line of defense. Security training, newsletters, and visual banners are all part of user education that can prove …
Recently I had to upgrade Cisco Ironport ESA from 9.1 to 9.7.0. As we know during the upgrade machine gets disconnected from the cluster and later needs to be joined back in manually. Upgrade took place as expected without any issues, machines reconnected back to the cluster but CONNSTATUS command …
Replacing SSL certificate on Ironport appliance can vary based on the model. In addition, once the certificate is installed you will need to make sure and update configuration everywhere it is applicable. Last time I’ve checked Cisco documentation was not very keen on it so when it came time to …