Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Require SMTP Authentication

Require TLS to Offer SMTP Authentication

The Email Security appliance checks a list of revoked certificates (called a Certificate Revocation List) 
as part of its certificate verification to make sure that the user’s certificate hasn’t been revoked. You keep 
an up-to-date version of this list on a server and the Email Security appliance downloads it on a schedule 
that you create.

Go to Network > CRL Sources.

Enable CRL checking for SMTP TLS connections:

Click Edit Settings under Global Settings.

Select the checkbox for CRL check for inbound SMTP TLS.

(Optional) Select the checkbox for CRL check for inbound SMTP TLS.

Submit your change.

Click Add CRL Source.

Enter a name for the CRL source.

Select the file type. This can be either ASN.1 or PEM.

Enter the URL for the primary source for the file, including the filename. For example, 

https://crl.example.com/certs.crl

Optionally, enter the URL for a secondary source in case the appliance cannot contact the primary 
source.

Specify a schedule for downloading the CRL source.

Enable the CRL source.

Submit and commit your changes.