Cisco Cisco Email Security Appliance C370 User Guide
3-3
Cisco IronPort AsyncOS 7.5 for Email Advanced Configuration Guide
OL-25137-01
Chapter 3 LDAP Queries
•
Domain-based Queries. You can create domain-based queries to allow the
IronPort appliance to perform different queries for different domains on a
single listener. When the Email Security Appliance runs the domain-based
queries, it determines the query to use based on the domain, and it queries the
LDAP server associated with that domain.
IronPort appliance to perform different queries for different domains on a
single listener. When the Email Security Appliance runs the domain-based
queries, it determines the query to use based on the domain, and it queries the
LDAP server associated with that domain.
•
Chain Queries. You can create a chain query to enable the IronPort appliance
to perform a series of queries in sequence. When you configure a chain query,
the IronPort appliance runs each query in sequence until the LDAP appliance
returns a positive result.
to perform a series of queries in sequence. When you configure a chain query,
the IronPort appliance runs each query in sequence until the LDAP appliance
returns a positive result.
•
Directory Harvest Prevention. You can configure the Cisco IronPort
appliance to combat directory harvest attacks using your LDAP directories.
You can configure directory harvest prevention during the SMTP
conversation or within the work queue. If the recipient is not found in the
LDAP directory, you can configure the system to perform a delayed bounce
or drop the message entirely. Consequently, spammers are not able to
differentiate between valid and invalid email addresses. See
appliance to combat directory harvest attacks using your LDAP directories.
You can configure directory harvest prevention during the SMTP
conversation or within the work queue. If the recipient is not found in the
LDAP directory, you can configure the system to perform a delayed bounce
or drop the message entirely. Consequently, spammers are not able to
differentiate between valid and invalid email addresses. See
•
SMTP Authentication. AsyncOS provides support for SMTP authentication.
SMTP Auth is a mechanism for authenticating clients connected to an SMTP
server. You can use this functionality to enable users at your organization to
send mail using your mail servers even if they are connecting remotely (e.g.
from home or while traveling). For more information, see
SMTP Auth is a mechanism for authenticating clients connected to an SMTP
server. You can use this functionality to enable users at your organization to
send mail using your mail servers even if they are connecting remotely (e.g.
from home or while traveling). For more information, see
•
External Authentication. You can configure your IronPort appliance to use
your LDAP directory to authenticate users logging in to the IronPort
appliance. For more information, see
your LDAP directory to authenticate users logging in to the IronPort
appliance. For more information, see
•
Spam Quarantine End-User Authentication. You can configure your
appliance to validate users when they log in to the end-user quarantine. For
more information, see
appliance to validate users when they log in to the end-user quarantine. For
more information, see
.
•
Spam Quarantine Alias Consolidation. If you use email notifications for
spam, this query consolidates the end-user aliases so that end-users do not
receive quarantine notices for each aliased email address. For more
information, see
spam, this query consolidates the end-user aliases so that end-users do not
receive quarantine notices for each aliased email address. For more
information, see