Cisco Cisco Email Security Appliance C160 Mode D'Emploi

When you configure AsyncOS to use LDAP directories, you create an LDAP server profile to store the 
information about the LDAP server. 

On the System Administration > LDAP page, click Add LDAP Server Profile. 

Enter a name for the server profile.

Enter the host name for the LDAP server.

You can enter multiple host names to configure the LDAP servers for failover or load-balancing. 
Separate multiple entries with commas. For more information, see 

.

Select an authentication method. You can use anonymous authentication or specify a username and 
password.

Select the LDAP server type: Active Directory, OpenLDAP, or Unknown or Other.

Enter a port number.

The default port is 3268. This is the default port for Active Directory that enables it to access the 
global catalog in a multi-server environment. 

Enter a Base DN (distinguishing name) for the LDAP server.

If you authenticate with a username and a password, the username must include the full DN to the 
entry that contains the password. For example, a user is a member of the marketing group with an 
email address of joe@example.com. The entry for this user would look like the following entry:

uid=joe, ou=marketing, dc=example dc=com

Select whether to use SSL when communicating with the LDAP server.

Under Advanced, enter cache time-to-live. This value represents the amount of time to retain caches.

Enter the maximum number of retained cache entries.

Enter a maximum number of simultaneous connections. 

If you configure the LDAP server profile for load balancing, these connections are distributed 
among the listed LDAP servers. For example, if you configure 10 simultaneous connections and load 
balance the connections over three servers, AsyncOS creates 10 connections to each server, for a 
total of 30 connections. 

The maximum number of simultaneous connections includes LDAP connections used for LDAP 
queries. However, the appliance may open more connections if you use LDAP authentication for 
the Spam Quarantine.

Test the connection to the server by clicking the Test Server(s) button. If you specified multiple LDAP 
servers, they are all tested. The results of the test appear in the Connection Status field. For more 
information, see 

.

Create queries by marking the checkbox and completing the fields. You can select Accept, Routing, 
Masquerade, Group, SMTP Authentication, External Authentication, Spam Quarantine End-User 
Authentication, and Spam Quarantine Alias Consolidation.