Cisco Cisco Email Security Appliance C680 Mode D'Emploi

Define users for the policy.

You define whether the user is a sender or a recipient. (See 

 for more 

detail.) The form shown in 

 defaults to recipients for incoming mail policies and to 

senders for outgoing mail policies.

Users for a given policy can be defined in the following ways:

Full email address: 

user@example.com

Partial email address: 

user@

All users in a domain: 

@example.com

All users in a partial domain: 

@.example.com

By matching an LDAP Query

Entries for users are case-insensitive in both the GUI and CLI in AsyncOS. For example, if you 
enter the recipient 

Joe@

 for a user, a message sent to 

joe@example.com

 will match. 

If you store user information within LDAP directories in your network infrastructure — for 
example, in Microsoft Active Directory, SunONE Directory Server (formerly known as “iPlanet 
Directory Server”), or Open LDAP directories — you can configure the Cisco IronPort appliance to 
query your LDAP servers for the purposes of accepting recipient addresses, rerouting messages to 
alternate addresses and/or mail hosts, masquerading headers, and determining if messages have 
recipients or senders from specific groups. 

If you have configured the appliance to do so, you can use the configured queries to define users for 
a mail policy in Email Security Manager. 

See the “LDAP Queries” chapter in the Cisco IronPort AsyncOS for Email Advanced Configuration 
Guide for more information. 

Click the Add button to add users into the Current Users list.