Cisco Cisco Email Security Appliance X1070 User Guide

80

HTTP

Out

cdn-microupdates.cloud
mark.com 

Used for updates to third-party spam 
component in Intelligent MultiScan. 
Appliance must also connect to CIDR 
range 208.83.136.0/22 for third-party 
phone home updates.

82

HTTP

In

AsyncOS IPs

Used for viewing the Cisco Anti-Spam 
quarantine.

83

HTTPS

In

AsyncOS IPs

Used for viewing the Cisco Anti-Spam 
quarantine.

110

TCP

Out

POP Server

POP authentication for end users for 
Cisco Spam Quarantine

123

UDP

In & Out

NTP Server

NTP if time servers are outside 
firewall.

143

TCP

Out

IMAP Server

IMAP authentication for end users for 
Cisco Spam Quarantine

161

UDP

In

AsyncOS IPs

SNMP Queries

162

UDP

Out

Management Station

SNMP Traps

389 

3268

LDAP

Out

LDAP Servers

LDAP if LDAP directory servers are 
outside firewall. LDAP authentication 
for Cisco Spam Quarantine

636
3269

LDAPS

Out

LDAPS

LDAPS — ActiveDirectory’s Global 
Catalog Server (uses SSL)

443

TCP

In

AsyncOS IPs

Secure HTTP (

https

) access to the 

GUI for system monitoring.

443

TCP

Out

res.cisco.com

Cisco Registered Envelope Service

443

TCP

Out

update-manifests.ironport
.com

Obtain the list of the latest files from 
the update server (for physical 
hardware appliances.)

443

TCP

Out

update-manifests.sco.cisc
o.com

Obtain the list of the latest files from 
the update server (for virtual 
appliances.) 

443

TCP

Out

phonehome.senderbase.or
g

Receive/Send Outbreak Filters

443 

TCP 

Out

In the command-line 
interface, run the 

websecurityadvancedco

nfig

 command and accept 

all defaults. The Web 
security service hostname 
is shown. 

Cloud service for obtaining URL 
reputation and category information for 
URL filtering.