Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Specify how to sign the message body. You can choose to sign the message body, 
and/or how many bytes to sign. Select one of the following options:

Whole Body Implied. Do not use the “l=” tag to determine body length. The 
entire message is signed and no changes are allowed.

Whole Body Auto-determined. The entire message body is signed, and 
appending some additional data to the end of body is allowed during transit.

Sign first _ bytes. Sign the message body up to the specified number of bytes. 

Specify an expiration time (in seconds) for the signature.

Enter users (email addresses, hosts, etc.) that will use the domain profile for 
signing.

When you create domain profiles, be aware that a hierarchy is used in determining 
the profile to associate with a particular user. For example, you create a profile for 
example.com and another profile for joe@example.com. When mail is sent from 
joe@example.com, the profile for joe@example.com is used. However, when 
mail is sent from adam@example.com, the profile for example.com is used.

Submit and commit your changes.

At this point (if you have not already) you should enable DomainKeys/DKIM 
signing on an outgoing mail flow policy (see 

).

If you create both a DomainKeys and DKIM profile, AsyncOS performs 
both DomainKeys and DKIM signing on outgoing mail.

To create a new signing key:

Click Add Key on the Mail Policies > Signing Keys page. The Add Key page is 
displayed.

Enter a name for the key. 

Click Generate and Select a key size.