Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 548
Chapter 3      LDAP Queries
3-162
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Overview
The following section provides an overview on the types of LDAP queries you can 
perform; how LDAP works with the IronPort appliance to authenticate, accept, 
and route messages; and how to configure your IronPort appliance to work with 
LDAP. 
Understanding LDAP Queries
If you store user information within LDAP directories in your network 
infrastructure, you can configure the IronPort appliance to query your LDAP 
server for the following purposes:
  •
Acceptance Queries. You can use your existing LDAP infrastructure to 
define how the recipient email address of incoming messages (on a public 
listener) should be handled. For more information, see 
.
  •
Routing (Aliasing) You can configure the appliance to route messages to the 
appropriate address and/or mail host based upon the information available in 
LDAP directories on your network. For more information, see 
  •
Masquerading. You can masquerade Envelope Senders (for outgoing mail) 
and message headers (for incoming mail, such as To:, Reply To:, From: or 
CC:). For more information about masquerading, see 
  •
Group Queries. You can configure the IronPort appliance to perform actions 
on messages based on the groups in the LDAP directory. You do this by 
associating a group query with a message filter. You can perform any message 
action available for message filters on messages that match the defined LDAP 
group. For more information, see 
  •
Domain-based Queries. You can create domain-based queries to allow the 
IronPort appliance to perform different queries for different domains on a 
single listener. When the Email Security Appliance runs the domain-based 
queries, it determines the query to use based on the domain, and it queries the 
LDAP server associated with that domain.