300-720: Securing Email with Cisco Email Security Appliance

Cisco ESA retains the message in its queue and retries encryption when the Cisco Registered Envelope Service is unavailable, up to the configured maximum time that a message may remain queued awaiting encryption. Only after that timeout can encryption failure handling notify the sender.

Cisco Email Security Sender Groups can use geolocation to classify or reject email servers by country, and they can use Cisco SenderBase Reputation Scores to apply policies based on a sender’s reputation. These controls operate at the sender/connection level to filter unwanted email traffic.

Cisco Secure Email Gateway evaluates the safelist immediately before anti-spam scanning. Messages from a safelisted sender skip anti-spam scanning but continue through antivirus scanning and other configured email-pipeline processing.

Cisco Secure Email Forged Email Detection uses content-dictionary entries representing users’ names to compare against the From header. The configuration requires entering the user’s name, rather than an email address, and prohibits regular expressions.

Forged Email Detection compares the message’s From header with user names in a content dictionary. Configure that dictionary with friendly names, then configure an incoming content or message filter that uses the Forged Email Detection rule and the dictionary.