• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1554
  • Last Modified:

Cisco Ironport initial setup

Hello Experts,

A client of mine insist on using Cisco Ironport to protect their mail server. I am going to need to see them soon on the setup requirement. However, I don't have any experience with Cisco Ironport.

What are the common questions that I need to ask in order to do this?

Their email server might be load balanced and pointed to some domain. Is it possible to use URL instead of IP?

Bur
0
chainfear
Asked:
chainfear
1 Solution
 
jmeggersCommented:
I don't have much experience with the C series, but here's a link to the configuration guide for Async OS.  I believe you can resolve the real e-mail server based on name but I'm not positive about that.  

http://www.cisco.com/en/US/docs/security/esa/esa7.3/ESA_7.3_Configuration_Guide.pdf
0
 
Dave HoweCommented:
There is a convenient checklist in the manual for such things - I will attach the manual to this post (its the 7.3 one, let me know if you need a different release version)

actual setup is fairly straightforward  - have a read though the installation section of the manual, and post any questions you have.

most load balanced setups use a virtual IP or something similar; you can either just point at that or set multiple delivery routes for inbound.

one gotcha you won't be expecting - while you can set source IPs to either be for inbound mail or be permitted relay for outbound mail, that's an exclusive or - they can't be both. so if you try setting another host to send mail to both internal and external recipients AND set it to go to the ironport, it will be permitted to do one or the other, not both (in practice, if you set it to be outbound, it will mostly work - mail will go out to the default outbound smarthost, turn around, and come back in, then be permitted as inbound-only sourced; you may bump your nose on the fact that internal mail will have both outbound THEN inbound rulesets applied to it) ESA-7.3-Configuration-Guide.pdf
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now