Руководство Пользователя для Cisco Cisco Email Security Appliance C160
4-245
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Chapter 4 Email Authentication
Step 9
Specify how to sign the message body. You can choose to sign the message body,
and/or how many bytes to sign. Select one of the following options:
and/or how many bytes to sign. Select one of the following options:
•
Whole Body Implied. Do not use the “l=” tag to determine body length. The
entire message is signed and no changes are allowed.
entire message is signed and no changes are allowed.
•
Whole Body Auto-determined. The entire message body is signed, and
appending some additional data to the end of body is allowed during transit.
appending some additional data to the end of body is allowed during transit.
•
Sign first _ bytes. Sign the message body up to the specified number of bytes.
Step 10
Specify an expiration time (in seconds) for the signature.
Step 11
Enter users (email addresses, hosts, etc.) that will use the domain profile for
signing.
signing.
Note
When you create domain profiles, be aware that a hierarchy is used in determining
the profile to associate with a particular user. For example, you create a profile for
example.com and another profile for joe@example.com. When mail is sent from
joe@example.com, the profile for joe@example.com is used. However, when
mail is sent from adam@example.com, the profile for example.com is used.
the profile to associate with a particular user. For example, you create a profile for
example.com and another profile for joe@example.com. When mail is sent from
joe@example.com, the profile for joe@example.com is used. However, when
mail is sent from adam@example.com, the profile for example.com is used.
Step 12
Submit and commit your changes.
Step 13
At this point (if you have not already) you should enable DomainKeys/DKIM
signing on an outgoing mail flow policy (see
signing on an outgoing mail flow policy (see
Note
If you create both a DomainKeys and DKIM profile, AsyncOS performs
both DomainKeys and DKIM signing on outgoing mail.
both DomainKeys and DKIM signing on outgoing mail.
Creating New Signing Keys
To create a new signing key:
Step 1
Click Add Key on the Mail Policies > Signing Keys page. The Add Key page is
displayed.
displayed.
Step 2
Enter a name for the key.
Step 3
Click Generate and Select a key size.