Category Archives: Cisco Email Security (Ironport)

ESA (Ironport) SenderBase and DNS. How It Works?

Applies to Cisco E-Mail Security Appliance 9.x.x Thanks to my colleague Sedat Tavukçu for testing and supporting this post. SenderBase Documentation: If you read Cisco Email Security Appliance  documentation, review the pictures for Sender Base process you may think that … Continue reading

Gallery | Tagged , , , , , , , , | 4 Comments

SOLUTION: Cisco ESA (Ironport) Mails are backing up (waiting) in the workqueue. If URL Filtering configured

Applies to: Cisco Email Security Appliance 9.1.0-032 and above with URL Filtering. Symptoms: Outgoing and incoming internet mails are delivered with a delay. Workqueue command shows up to 5000 mails in the queue. If you track the messages you noticed … Continue reading

Gallery | Tagged , , , , , , | Leave a comment

How To Change IP address of a Cisco ESA (Ironport) Node in Cluster

Applies to Cisco Email Security Appliance (Ironport) Version: 9.6.x Issue: Assume that you have a Ironport cluster consists of 3 ironport hosts: Esa1 (10.10.10.1) , esa2 (10.10.10.2)  and esa3 (10.10.10.3) . You need to change IP address of esa3 to … Continue reading

Gallery | Tagged , , , | Leave a comment

What is IronPort-PHdr Mail Header?

Question: What is IronPort-PHdr Mail Header? Applies To: Cisco Email Security Appliance (ESA aka Ironport) ver 9.6.0-042 Answer: ESA now has new feature called Gray Mail. Which classifies marketing, social media and bulk mailing and allows you to take an … Continue reading

Gallery | Tagged , , , , , | Leave a comment

Solution: Virtual Cisco Email Security Appliance console hangs

Applies to: VMWare ESXİ 5.X Cisco Virtual E-mail Security Appliance 9.x (ESA aka Ironport) Problem: During initial installation of Virtual ESA on VMWare you use CLI console using vSphere Client. But sometimes (I suspected that If you change Network Card … Continue reading

Gallery | Tagged , , | Leave a comment

SOLUTION: ESA Centralizing Policy, Virus, and Outbreak Quarantine (PVO) Cannot be Enabled

Problem: Applies to Cisco Email Security Appliance 9.1.0 (Ironport C Series) and Cisco Content Security Management 9.1.1 (Ironport M Series) You installed new Ironport C series and now want to configure Central Policy, Virus, and Outbreak Quarantine (POV) so that … Continue reading

Gallery | Tagged , , | Leave a comment