Cisco Cisco Email Security Appliance C160 Mode D'Emploi
5-15
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
OL-25137-01
Chapter 5 Email Authentication
Step 3
The search scans the following fields for each domain profile: email, domain, selector, and signing key
name.
name.
Note
If you do not enter search terms, the search engine returns all domain profiles.
Signing System-Generated Messages
You can choose whether to sign system-generated messages with a DKIM signature. The types of
system-generated message that the Email Security appliance will sign include the following:
system-generated message that the Email Security appliance will sign include the following:
•
Cisco IronPort Spam Quarantine notifications
•
Content filter-generated notifications
•
Configuration messages
•
Support requests
To enable the appliance to sign system-generated messages:
Step 1
Click Edit Settings under DKIM Signing of System Generated Messages on the Domain Signing
Profiles page. The DKIM Signing of System Generated Messages.
Profiles page. The DKIM Signing of System Generated Messages.
Step 2
Select On.
Step 3
Submit and commit your changes.
Domain Keys and Logging
Lines such as the following are added to the mail logs upon DomainKeys signing:
Lines such as these are added to the mail logs upon DKIM signing:
Configuring DKIM Verification
In addition to signing outgoing mail, you can use DKIM to verify incoming mail.
To configure DKIM verification, you need to:
•
Create a DKIM verification profile for your mail flow policies.
•
Enable DKIM verification on a mail flow policy for inbound mail.
Tue Aug 28 15:29:30 2007 Info: MID 371 DomainKeys: signing with dk-profile - matches
user123@example.com
Tue Aug 28 15:34:15 2007 Info: MID 373 DomainKeys: cannot sign - no profile matches
user12@example.com
Tue Aug 28 15:29:54 2007 Info: MID 372 DKIM: signing with dkim-profile - matches
user@example.com
Tue Aug 28 15:34:15 2007 Info: MID 373 DKIM: cannot sign - no profile matches
user2@example.com