Cisco Cisco Email Security Appliance C650 用户指南

On the System Administration > LDAP page, click Add LDAP Server Profile. 

Enter a name for the server profile.

Enter the host name for the LDAP server.

You can enter multiple host names to configure the LDAP servers for failover or load-balancing. 
Separate multiple entries with commas. 

Select an authentication method. You can use anonymous authentication or specify a username and 
password.

Select the LDAP server type: Active Directory, OpenLDAP, or Unknown or Other.

Enter a port number.

The default port is 3268. This is the default port for Active Directory that enables it to access the 
global catalog in a multi-server environment. 

Enter a Base DN (distinguishing name) for the LDAP server.

If you authenticate with a username and a password, the username must include the full DN to the 
entry that contains the password. For example, a user is a member of the marketing group with an 
email address of joe@example.com. The entry for this user would look like the following entry:

uid=joe, ou=marketing, dc=example dc=com

Select whether to use SSL when communicating with the LDAP server.

Under Advanced, enter cache time-to-live. This value represents the amount of time to retain caches.

Enter the maximum number of retained cache entries.

This cache is maintained per LDAP server. If you are configuring more than one LDAP servers, 
you must set a smaller LDAP cache value for better performance. Also, if the memory usage of 
various processes in the appliance is high, increasing this value may reduce the system 
performance.

Enter a maximum number of simultaneous connections. 

If you configure the LDAP server profile for load balancing, these connections are distributed among the 
listed LDAP servers. For example, if you configure 10 simultaneous connections and load balance the 
connections over three servers, AsyncOS creates 10 connections to each server, for a total of 30 
connections. 

The maximum number of simultaneous connections includes LDAP connections used for LDAP 
queries. However, the appliance may open more connections if you use LDAP authentication for 
the Spam Quarantine.

Test the connection to the server by clicking the Test Server(s) button. If you specified multiple LDAP 
servers, they are all tested. The results of the test appear in the Connection Status field. For more 
information, see 

.

Create queries by marking the checkbox and completing the fields. You can select Accept, Routing, 
Masquerade, Group, SMTP Authentication, External Authentication, Spam Quarantine End-User 
Authentication, and Spam Quarantine Alias Consolidation.