Cisco Cisco Email Security Appliance C160 Guía Del Usuario

Remember that each recipient is evaluated for each policy in the appropriate 
table (incoming or outgoing) in a top-down fashion. See 

 for more information. 

Define users for the policy.

You define whether the user is a sender or a recipient. (See 

 for more detail.) The form shown in 

 defaults to 

recipients for incoming mail policies and to senders for outgoing mail 
policies.

Users for a given policy can be defined in the following ways:

Full email address: 

user@example.com

Partial email address: 

user@

All users in a domain: 

@example.com

All users in a partial domain: 

@.example.com

By matching an LDAP Query

Entries for users are case-insensitive in both the GUI and CLI in 
AsyncOS. Use caution when entering user for a given policy. For 
example, if you enter the recipient 

Joe@

 for a user, a message sent to 

joe@example.com

 will not match. 

If you store user information within LDAP directories in your network 
infrastructure — for example, in Microsoft Active Directory, SunONE 
Directory Server (formerly known as “iPlanet Directory Server”), or Open 
LDAP directories — you can configure the IronPort appliance to query your 
LDAP servers for the purposes of accepting recipient addresses, rerouting 
messages to alternate addresses and/or mail hosts, masquerading headers, and 
determining if messages have recipients or senders from specific groups. 

If you have configured the appliance to do so, you can use the configured 
queries to define users for a mail policy in Email Security Manager. 

See the “LDAP Queries” chapter in the Cisco IronPort AsyncOS for Email 
Advanced Configuration Guide for more information.