Cisco Cisco Email Security Appliance C170 사용자 가이드

Enter the name of the profile.

Select the minimum key size you want the appliance to accept for signing keys.

Select the maximum key size you want the appliance to accept for signing keys.

Select the maximum number of signatures to verify in a single message. The default is five signatures.

Select the number of seconds before the key query times out. The default is 10 seconds.

Select maximum allowed difference in time (in seconds) between the sender’s system time and verifier’s. 
The default is 60 seconds.

Select whether to use the body-length parameter in the signature to verify the message.

Select whether the Email Security appliance accepts or rejects the message if there is a temporary failure 
when verifying its signature. If you want the appliance to reject the message, you can choose to have it 
send the default 451 SMTP response code or another SMTP response code and text.

Select whether the Email Security appliance accepts or rejects the message if there is a permanent failure 
when verifying its signature. If you want the appliance to reject the message, you can choose to have it 
send the default 451 SMTP response code or another SMTP response code and text.

Submit your changes.

The new profile appears in the DKIM Verification Profiles table.

Commit your changes.

At this point you should enable DKIM verification on an incoming mail flow policy and select the 
verification profile you want to use.