Cisco Cisco Email Security Appliance C160 Mode D'Emploi

messages when they are received back — messages will bypass the HAT and other 
policy or scanning settings and be delivered. For this to work, the IP address of 
the Cisco IronPort M-Series appliance must not change. If the IP address of the 
Cisco IronPort M-Series appliance changes, the receiving C- or X-Series 
appliance will process the message as it would any other incoming message. You 
should always use the same IP address for receiving and delivery on the Cisco 
IronPort M-Series appliance.

The Cisco IronPort M-Series appliance accepts mail for quarantining from the IP 
addresses specified in the IronPort Spam Quarantine settings. To configure the 
local quarantine on the Cisco IronPort M-Series appliance see the Cisco IronPort 
AsyncOS for Security Management User Guide . Note that the local quarantine on 
the Cisco IronPort M-Series appliance is referred to as an external quarantine by 
the other Cisco IronPort appliances sending mail to it.

Mail released by the Cisco IronPort M-Series appliance is delivered to the primary 
and secondary hosts (Cisco IronPort appliance or other groupware host) as 
defined in the Spam Quarantine Settings (see the Cisco IronPort AsyncOS for 
Security Management User Guide ). Therefore, regardless of the number of Cisco 
IronPort appliances delivering mail to the Cisco IronPort M-Series appliance, all 
released mail, notifications, and alerts are sent to a single host (groupware or 
Cisco IronPort appliance). Take care to not overburden the primary host for 
delivery from the Cisco IronPort M-Series appliance.

Before you can use a Security Management appliance for centralized reporting 
and centralized tracking or as an external IronPort Spam Quarantine, you need to 
configure the monitoring services on the Email Security appliances.

When you configure the monitoring services on the Email Security appliances, 
you must also enable the services on the Security Management appliance. For 
more information, see the Cisco IronPort AsyncOS for Security Management User 
Guide .

You use monitoring services to run reports on email traffic, track message routing, 
and deliver suspect and spam messages to an external IronPort Spam Quarantine. 
You can configure one or more of the following services:

Centralized Reporting. For more information, see 

.