Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Cisco

C H A P T E R

22-1

Cisco AsyncOS 8.0.1 for Email User Guide

22

LDAP Queries

•

Overview of LDAP Queries, page 22-1

•

Creating LDAP Server Profiles to Store Information About the LDAP Server, page 22-5

•

Working with LDAP Queries, page 22-11

•

Using Acceptance Queries For Recipient Validation, page 22-18

•

Using Routing Queries to Send Mail to Multiple Target Addresses, page 22-19

•

Using Masquerading Queries to Rewrite the Envelope Sender, page 22-20

•

Using Group LDAP Queries to Determine if a Recipient is a Group Member, page 22-22

•

Using Domain-based Queries to Route to a Particular Domain, page 22-25

•

Using Chain Queries to Perform a Series of LDAP Queries, page 22-27

•

Using LDAP For Directory Harvest Attack Prevention, page 22-28

•

Configuring AsyncOS for SMTP Authentication, page 22-31

•

Configuring External LDAP Authentication for Users, page 22-39

•

Authenticating End-Users in the Cisco IronPort Spam Quarantine, page 22-42

•

Spam Quarantine Alias Consolidation Queries, page 22-43

•

Identifying a Sender’s User Distinguished Name for RSA Enterprise Manager, page 22-44

•

Configuring AsyncOS To Work With Multiple LDAP Servers, page 22-45

Overview of LDAP Queries

If you store user information within LDAP directories in your network infrastructure — for example, in
Microsoft Active Directory, SunONE Directory Server, or OpenLDAP directories — you can configure
the Cisco appliance to query your LDAP servers to accept, route, and authenticate messages. You can
configure the Cisco appliance to work with one or multiple LDAP servers.

The following section provides an overview on the types of LDAP queries you can perform; how LDAP
works with the Cisco appliance to authenticate, accept, and route messages; and how to configure your
Cisco appliance to work with LDAP.