Cisco Cisco Email Security Appliance C160 Mode D'Emploi

You can import DKIM verification profiles that you previously exported. Importing DKIM verification 
profiles causes all of the current DKIM verification profiles on the machine to be replaced. See 

 for more information.

Click Mail Policies > Verification Profiles.

Click Add Profile. 

Enter the name of the profile.

Select the minimum key size you want the appliance to accept for signing keys.

Select the maximum key size you want the appliance to accept for signing keys.

Select the maximum number of signatures to verify in a single message. The default is five signatures.

Select the number of seconds before the key query times out. The default is 10 seconds.

Select maximum allowed difference in time (in seconds) between the sender’s system time and verifier’s. 
The default is 60 seconds.

Select whether to use the body-length parameter in the signature to verify the message.

Select whether the Email Security appliance accepts or rejects the message if there is a temporary failure 
when verifying its signature. If you want the appliance to reject the message, you can choose to have it 
send the default 451 SMTP response code or another SMTP response code and text.

Select whether the Email Security appliance accepts or rejects the message if there is a permanent failure 
when verifying its signature. If you want the appliance to reject the message, you can choose to have it 
send the default 451 SMTP response code or another SMTP response code and text.

Submit your changes.

The new profile appears in the DKIM Verification Profiles table.

Commit your changes.

At this point you should enable DKIM verification on an incoming mail flow policy and select the 
verification profile you want to use.

All DKIM verification profiles on the appliance are exported as a single text file and saved in the 

configuration

 directory on the appliance.