Cisco Cisco Email Security Appliance C170

Cloudmark Anti-spam 
Engine Update

The Cloudmark anti-spam engine is updated in this release.

Non-Spam Quarantines 

You can now specify a retention time in minutes for all policy, virus, and 
outbreak quarantines including the File Analysis quarantine. 

LDAP 

LDAP queries that return certain error codes such as Unavailable, Busy, or 
Operations Error, now fall back to a subsequent LDAP server listed for 
failover. Previously, failover occurred only if the connection to the LDAP 
server failed.

Option to accept or reject 
ARP replies with a 
multicast address

While configuring ethernet media settings using the 

etherconfig

 

command in CLI, you can now specify whether to accept or reject ARP 
replies with a multicast address.

Support for RAR 5.0 
Archive Format

Cisco Email Security appliance now supports scanning of RAR 5.0 files.

Changes in SMTP 
Call-Ahead Server Profile 
Settings

While setting up an SMTP Call-Ahead Server Profile, you can now 
configure the appliance to reject a connection with custom SMTP response 
(code and text) for validation failures.

DKIM Signing-related 
Logging Changes 

If the log level is set to Trace, the mail log will now include additional 
log entries to identify errors that occur during the DKIM signing 
process. 

The mail log will now include two separate log entries for DKIM 
signing: one for displaying the signing profile that will be used for the 
signing and the other for the signing event.

AMP-related Mail Log 
and Message Tracking 
Changes

Prior to this release, if the threat verdict of a file is unknown, the verdict 
was shown as “clean” in the mail log and message tracking. 

After upgrading to this release, if the threat verdict of a file is unknown, 
the mail log and message tracking will show the verdict as “unknown.”