Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
13-30
Cisco IronPort AsyncOS 8.0 for Security Management User Guide
Chapter 13 Common Administrative Tasks
The alert mail system does not share the same configuration as AsyncOS, which means that alert
messages may behave slightly differently from other mail delivery:
messages may behave slightly differently from other mail delivery:
•
Alert messages are delivered using standard DNS MX and A record lookups.
–
They do not use SMTP routes in AsyncOS versions older then 5.X.
–
They do cache the DNS entries for 30 minutes and the cache is refreshed every 30 minutes, so
in case of DNS failure the alerts still go out.
in case of DNS failure the alerts still go out.
•
Alert messages do not pass through the work queue, so they are not scanned for viruses or spam.
They are also not subjected to message filters or content filters.
They are also not subjected to message filters or content filters.
•
Alert messages do not pass through the delivery queue, so they will not be affected by bounce
profiles or destination control limits.
profiles or destination control limits.
Cisco IronPort AutoSupport
To allow Cisco IronPort to better support and design future system changes, the Cisco IronPort appliance
can be configured to send Cisco IronPort Systems a copy of all alert messages generated by the system.
This feature, called ‘AutoSupport’, is a useful way to allow Cisco IronPort Customer Support to be
proactive in supporting your needs. AutoSupport also sends weekly reports noting the uptime of the
system, the output of the status command, and the AsyncOS version used.
can be configured to send Cisco IronPort Systems a copy of all alert messages generated by the system.
This feature, called ‘AutoSupport’, is a useful way to allow Cisco IronPort Customer Support to be
proactive in supporting your needs. AutoSupport also sends weekly reports noting the uptime of the
system, the output of the status command, and the AsyncOS version used.
By default, alert recipients set to receive Information severity level alerts for System alert types receive
a copy of every message sent to Cisco IronPort. This can be disabled if you do not want to send the
weekly alert messages internally. To enable or disable this feature, see
a copy of every message sent to Cisco IronPort. This can be disabled if you do not want to send the
weekly alert messages internally. To enable or disable this feature, see
Alert Messages
Alert messages are standard email messages. Although you can configure the Header From: address, the
rest of the message is generated automatically.
rest of the message is generated automatically.
Alert From Address
You can configure the Header From: address by clicking the Edit Settings button in the GUI or by using
the CLI (see the Cisco IronPort AsyncOS CLI Reference Guide).
the CLI (see the Cisco IronPort AsyncOS CLI Reference Guide).
Alert Subject
An alert message’s subject has the following format:
Subject: [severity]-[hostname]: ([class]) short message
Example Alert Message
Date: 23 Mar 2007 21:10:19 +0000
To: joe@example.com
From: Cisco IronPort M650 Alert [alert@example.com]
Subject: Critical-example.com: (AntiVirus) update via http://newproxy.example.com failed
The Critical message is: