Cisco Cisco Email Security Appliance C160
3
Release Notes for Cisco IronPort AsyncOS 7.6.3 for Email
7.6.3
What’s New
New Feature: RSA Enterprise Manager Integration
AsyncOS 7.6’s RSA Enterprise Manager Integration allows your organization to migrate an Email
Security appliance’s Data Loss Prevention policies to RSA Security’s Enterprise Manager software in
order to distribute those policies to all of your vectors enforcement. With RSA Enterprise Manager
Integration, you can ensure consistent DLP policies across your enterprise and still have the option to
manage policies on a local Email Security appliance when needed. For users of RSA’s DLP Datacenter,
RSA Enterprise Manager Integration also provides fingerprinting detection for scanning source code and
documents to certain DLP policies.
Security appliance’s Data Loss Prevention policies to RSA Security’s Enterprise Manager software in
order to distribute those policies to all of your vectors enforcement. With RSA Enterprise Manager
Integration, you can ensure consistent DLP policies across your enterprise and still have the option to
manage policies on a local Email Security appliance when needed. For users of RSA’s DLP Datacenter,
RSA Enterprise Manager Integration also provides fingerprinting detection for scanning source code and
documents to certain DLP policies.
Enterprise Manager is a third-party software offered by RSA Security, Inc. It is not a part of the Cisco
IronPort Email Security appliance. This feature is compatible with version 9.0 of the Enterprise Manager
software.
IronPort Email Security appliance. This feature is compatible with version 9.0 of the Enterprise Manager
software.
See the “Data Loss Prevention” chapter in the Cisco IronPort AsyncOS for Email Configuration Guide
for more information.
for more information.
As part of RSA Enterprise Manager Integration, AsyncOS now includes a User Distinguished Name
LDAP query for LDAP profiles. This query returns a message sender’s distinguished name for the Email
Security appliance to include with all the other DLP incident data it sends to Enterprise Manager.
LDAP query for LDAP profiles. This query returns a message sender’s distinguished name for the Email
Security appliance to include with all the other DLP incident data it sends to Enterprise Manager.
See the “LDAP Queries” chapter in the Cisco IronPort AsyncOS Advanced Configuration Guide
Enhancement: DLP Message Tracking Privileges By User Group
AsyncOS 7.6 allows you to choose which non-administrator user can view sensitive DLP-related
information in Message Tracking by user role. See the “Common Administrative Tasks” chapter in the
Cisco IronPort AsyncOS for Email Daily Management Guide for more information.
information in Message Tracking by user role. See the “Common Administrative Tasks” chapter in the
Cisco IronPort AsyncOS for Email Daily Management Guide for more information.
Enhancement: RSA Email DLP’s “Quarantine a Copy and Deliver” Option
AsyncOS 7.6 provides an option to quarantine a copy of a message that violates a RSA Email DLP policy
while still delivering the original message. See the “Data Loss Prevention” chapter in the Cisco IronPort
AsyncOS for Email Configuration Guide for more information.
while still delivering the original message. See the “Data Loss Prevention” chapter in the Cisco IronPort
AsyncOS for Email Configuration Guide for more information.
Enhancement: DLP Message Actions
Starting in AsyncOS 7.6, the primary and secondary actions performed by DLP policies are now defined
as message actions. You create message actions using the Mail Policies > DLP Message Actions page in
the GUI and then add the actions to your DLP policies. When updating from a previous version of
AsyncOS, the system automatically generates new message actions based on the primary and secondary
actions defined in your existing DLP policies.
as message actions. You create message actions using the Mail Policies > DLP Message Actions page in
the GUI and then add the actions to your DLP policies. When updating from a previous version of
AsyncOS, the system automatically generates new message actions based on the primary and secondary
actions defined in your existing DLP policies.
See the “Data Loss Prevention” chapter in the Cisco IronPort AsyncOS for Email Configuration Guide
for more information.
for more information.
Enhancement: New and Updated RSA Email DLP Policy Templates
AsyncOS 7.6 includes some updated RSA Email DLP policy templates, which may affect the
performance of existing DLP policies on your appliance. Please double-check your DLP policies to see
if the classifiers have changed.
performance of existing DLP policies on your appliance. Please double-check your DLP policies to see
if the classifiers have changed.