Link to home
Start Free TrialLog in
Avatar of Shakthi777
Shakthi777Flag for Afghanistan

asked on

Cisco ASA blocks TLS through SMTP ???

Hi Experts,

I'm in the process of testing and establishing a TLS connection with the third party email filtering company. They are escalating my firewall is masked out STARTLS as a SMTP security precaution.

My firewall is running 8.0(4) IOS, how do i identify this situation and disable the SMTP protection to establish TLS between my email server and them ??

Thanks a lot !  
ASKER CERTIFIED SOLUTION
Avatar of stsonline
stsonline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Shakthi777

ASKER

First I did,
$policy-map type inspect esmtp esmtp_map
$parameters
$allow-tls

But it didn't work,

and after that i did
$no fixup protocol smtp 25

now it's works !

What is the diferent between those commands ??

Thanks a lot for your time !
The policy-map commands are used in version 8.0 of the Cisco PIX/ASA OS, the fixup command is an obsolete command used in version 6 and earlier. If you are running 8.0(4) you should not have fixup commands, you may want to check the version information.
I'm sure that I'm running 8.0(4), and I'm sure that $no fixup protocol smtp 25 worked for me. (but I'm a new to Cisco any way .. )

thanks for you support !