Manualsbrain.com
  1. Manuals
  2. Brands
  3. Cisco
  4. Cisco Email Security Appliance X1070
  5. Troubleshooting Guide

Cisco Cisco Email Security Appliance X1070 Troubleshooting Guide

Download
Page of 3
Common Configuration Errors on the ESA
Document ID: 118465
Contributed by Liz Slocum and Enrico Werner, Cisco TAC Engineers.
Oct 13, 2014
Contents
Introduction
What are the common configuration errors on the ESA?
1. HAT
2. Policy
3. Incoming relays
4. DNS
5. Message and Content Filters
7. Open Relay Prevention
Related Information
Introduction
This document describes common configuration errors on Email Security Appliance (ESA).
What are the common configuration errors on the ESA?
Whether you are setting up a new evaluation or looking over an existing configuration, you can refer to this
checklist of common configuration mistakes.
1. HAT
Do not put positive SBRS scores like +5 or +7 into the WHITELIST. A range of 9.0−10.0 would be
OK, but including lower scores will only make it more likely that spam will get through.
• 
Disable the UNKNOWNLIST, Envelope Sender DNS Verification and Connecting Host DNS
Verification unless you really need and understand these.
• 
Instead of changing message size and other policy settings in each Mail Flow Policy, go to the Mail
Flow Policies menu and choose the last option, "Default Policy Parameters".
• 
Limit maximum connections to three for most senders, and make this the default for new Mail Flow
Policies.
• 
Check that SenderBase scores from −10.0 to −2.0 are included in the BLACKLIST. The
documentation and setup wizards are overly conservative; we currently have no false positives in this
range.
•