Cisco Cisco Email Security Appliance X1050 Information Guide

Contributed by Kevin Luu and Robert Sherwin, Cisco TAC Engineers.

Oct 09, 2014

This document describes how to test if your domain supports TLS with the Cisco Registered Envelope
Service (CRES).

Note: You will need a CRES administrator account pre−configured to perform the following steps.

If you believe the SSL cert supporting your domain is correct, as the CRES Account Admin, you can log into
the CRES server and run a diagnostic check to see if there is a TLS connection between the CRES server and
your domain:

Log into the CRES admin site (https://res.cisco.com/admin).

Note: Use the same email and password that you use to log into standard CRES
(https://res.cisco.com).

1. 

After logging in, click on the "Accounts" tab.

2. 

Then click on the account number listed at the bottom that pertains to your company.

3. 

After clicking the account number, you should be presented with a new set of sub−tabs.

4. 

Select the sub−tab called "Features".  Enter in your domain (e.g.  example.com) and then click on
"Test Domain".

5. 

Depending on the results, if the results show that your domain supports TLS, then click on "Add
domain" and the CRES Admin team will review the submission and notify you when your domain has
been added to the CRES TLS supported domains.

6. 

If there is any failure, the results will also display the cause of the failure. Address the problem and
then re−do the test.

7. 

Another option you have is to configure how the CRES server handles TLS connection failures. 
Click on the "Details" sub−tab and you should be presented with this option:

On TLS failure choose one of the following delivery preferences:

 − Fallback to Registered Envelope Delivery

 − Bounce Messages

8.