Cisco Cisco Email Security Appliance C680 Technical References

Page of 325
 
3-107
CLI Reference Guide for AsyncOS 9.7 for Cisco Email Security Appliances
 
Chapter 3      The Commands: Reference Examples
  General Management/Administration/Troubleshooting
Service Access currently ENABLED (0 current service logins).
Tunnel option is not active.
Serial Number: XXXXXXXXXXXX-XXXXXXX
Choose the operation you want to perform:
- DISABLE - Prevent customer service representatives from remotely accessing your system.
- STATUS - Display the current techsupport status.
[]>
tlsverify
Description
Establish an outbound TLS connection on demand and debug any TLS connection issues concerning a 
destination domain. To create the connection, specify the domain to verify against and the destination 
host. AsyncOS checks the TLS connection based on the Required (Verify) TLS setting
Usage
Commit: This command does not require a ‘commit’.
Cluster Management: This command is restricted to machine mode.
Batch Command: This command supports a batch format.
Batch Format
The batch format of the 
tlsverify
 command can be used to perform all the fuctions of the traditional 
CLI command to check the TLS connection to the given hostname.
Example
mail3.example.com> tlsverify
Enter the TLS domain to verify against:
[]> example.com
Enter the destination host to connect to.  Append the port (example.com:26) if you are not 
connecting on port 25:
[example.com]> mxe.example.com:25
Connecting to 1.1.1.1 on port 25.
Connected to 1.1.1.1 from interface 10.10.10.10.
Checking TLS connection.
TLS connection established: protocol TLSv1, cipher RC4-SHA.
Verifying peer certificate.
Verifying certificate common name mxe.example.com.
TLS certificate match mxe.example.com
TLS certificate verified.
TLS connection to 1.1.1.1 succeeded.
tlsverify <domain> <hostname>[:<port>]