Cisco Cisco Email Security Appliance C690 Mode D'Emploi

Certificates Management. You can use the GUI and CLI to add trusted 
public certificates and create a self-signed certificate. You can also use the 
appliance to generate a certificate signing request. See the “Customizing 
Listeners” chapter of the Cisco IronPort AsyncOS for Email Advanced 
Configuration Guide for more information.

Certificate Authorities Management. You can import a custom list of 
trusted certificate authorities onto the appliance, as well as disable and export 
the default system list. See the “Customizing Listeners” chapter of the Cisco 
IronPort AsyncOS for Email Advanced Configuration Guide for more 
information.

TLS per Listener. You can assign a unique certificate per listener on the 
appliance for TLS connections. You can also assign a certificate to the 
HTTPS services on an IP interface, the LDAP interface, and all outgoing TLS 
connections. See the “Customizing Listeners” chapter of the Cisco IronPort 
AsyncOS for Email Advanced Configuration Guide for more information.

Batch Management. You can import and export a Destination Controls 
configuration file that defines multiple destination domains using the GUI 
and CLI. See the “Configuring Routing and Delivery” chapter of the Cisco 
IronPort AsyncOS for Email Advanced Configuration Guide for more 
information.

Troubleshooting Tools. AsyncOS 7.1 provides three new troubleshooting 
tools for TLS: 

The 

hoststatus

 command has been enhanced to display the reason why 

the last outgoing TLS connection failed. 

The 

tlsverify

 command has been added to create a TLS connection on 

demand. This allows an administrator to pinpoint the exact step a TLS 
connection failure occurs. 

AsyncOS 7.1 records information on why a TLS connection attempt 
failed in the mail logs.

See the “Testing and Troubleshooting” chapter of the Cisco IronPort 
AsyncOS for Email Daily Management Guide and the Cisco IronPort 
AsyncOS CLI Reference Guide for more information.