Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 400
 
5-15
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
OL-25137-01
Chapter 5      Email Authentication
Step 3
The search scans the following fields for each domain profile: email, domain, selector, and signing key 
name.
Note
If you do not enter search terms, the search engine returns all domain profiles.
Signing System-Generated Messages
You can choose whether to sign system-generated messages with a DKIM signature. The types of 
system-generated message that the Email Security appliance will sign include the following:
  •
Cisco IronPort Spam Quarantine notifications
  •
Content filter-generated notifications
  •
Configuration messages
  •
Support requests
To enable the appliance to sign system-generated messages:
Step 1
Click Edit Settings under DKIM Signing of System Generated Messages on the Domain Signing 
Profiles page. The DKIM Signing of System Generated Messages.
Step 2
Select On.
Step 3
Submit and commit your changes.
Domain Keys and Logging
Lines such as the following are added to the mail logs upon DomainKeys signing:
Lines such as these are added to the mail logs upon DKIM signing:
Configuring DKIM Verification
In addition to signing outgoing mail, you can use DKIM to verify incoming mail. 
To configure DKIM verification, you need to:
  •
Create a DKIM verification profile for your mail flow policies.
  •
Enable DKIM verification on a mail flow policy for inbound mail.
Tue Aug 28 15:29:30 2007 Info: MID 371 DomainKeys: signing with dk-profile - matches 
user123@example.com
Tue Aug 28 15:34:15 2007 Info: MID 373 DomainKeys: cannot sign - no profile matches 
user12@example.com
Tue Aug 28 15:29:54 2007 Info: MID 372 DKIM: signing with dkim-profile - matches 
user@example.com
Tue Aug 28 15:34:15 2007 Info: MID 373 DKIM: cannot sign - no profile matches 
user2@example.com