Cisco Cisco Email Security Appliance C160 Mode D'Emploi

the value of the Origin IP header is not in the list of allowed IP addresses 

OR 

the value of the Origin IP header is not in the list of allowed IP Addresses and the IP address of 
the proxy connected to the appliance is not in the list of allowed proxies.

Use the System Administration > Network Access page. 

Click Edit Settings. 

Select the mode of control for the access list.

Enter the IP addresses from which users will be allowed to connect to the appliance.

You can enter an IP address, IP address range or CIDR range. Use commas to separate multiple 
entries.

If connecting through a proxy is allowed, enter the following information: 

The IP addresses of the proxies allowed to connect to the appliance. Use commas to separate 
multiple entries.

The name of the origin IP header that the proxy sends to the appliance, which contains the IP 
addresses of the remote user’s machine and the proxy servers that forwarded the request. By default, 
the name of the header is 

x-forwarded-for

.

Submit and commit your changes.

You can specify how long a user can be logged into the Email Security appliance’s Web UI before 
AsyncOS logs the user out due to inactivity. This Web UI session timeout applies to all users, including 
admin, and it is used for both HTTP and HTTPS sessions. 

Once AsyncOS logs a user out, the appliance redirects the user’s web browser to login page.

The Web UI Session Timeout does not apply to Cisco IronPort Spam Quarantine sessions, which have a 
30 minute timeout that cannot be configured.

Use the System Administration > Network Access page. 

Click Edit Settings. 

Enter the number of minutes users can be inactive before being logged out. You can define a timeout 
period between 5 and 1440 minutes. 

Submit and commit your changes.