Cisco Cisco ASA 5505 Adaptive Security Appliance Technical Manual
ERS Standard − Contains the known sources of spam
•
ERS Advanced − Contains the known sources and the suspected sources
•
When an IP address is added to ERS Standard database, it is termed a spam source and is rare that you
observe an IP address removed from this list. ERS Standard contains the list of IP addresses that consistently
originate spam.
observe an IP address removed from this list. ERS Standard contains the list of IP addresses that consistently
originate spam.
ERS Advanced contains a list of IP addresses which are meant to be removed if found to not produce the
spam any further. For example, a hacked Mail server can be listed in this database at the time when it is
compromised. When it is restored to normalcy, it is removed from this database.
spam any further. For example, a hacked Mail server can be listed in this database at the time when it is
compromised. When it is restored to normalcy, it is removed from this database.
Configure
In this section, you are presented with the information to configure the features described in this document.
Note: Use the Command Lookup Tool (registered customers only) to obtain more information on the
commands used in this section.
commands used in this section.
Choose Mail (SMTP) > Anti−spam > Email Reputation. A new window opens.
1.
From the Target tab, click Enable in order to enable this Email Reputation feature.
2.
Choose Advanced for the Service Level.
3.
From the Approved IP Addresses field, specify the range of IP addresses that you want to exempt
from scanning.
from scanning.
4.
From the Action tab, specify the type of action based on your enterprise security policy. These three
actions are available:
actions are available:
Close connection with an error message
♦
Close connection without error message
♦
Bypass the connection
♦
5.