Cisco Iron port ESA licensing

Hi Team,
We are using 20,000 mailbox/user Antispam/Antivirus license for cisco ironport email security appliance. Customer want to know the impact on email scanning if they rduced their user count to 10,000.
will this affect the volume of traffic being scanned and processed by the appliance concurrently or not ?
As we are not configuring mailboxes on the ironport devices ,how come the ironport device calculate usercount/mailbox ?
does the user count means simultanious connection per second?
please help me to find a solution
Regards
Muhammad

Ironport ESA and WSA licensing is trust-based: you should purchase the amount of licenes that reflects the amount of users behind an Ironport device (email gateway or web proxy), but the actual users aren't counted.
Sent from Cisco Technical Support iPad App

Similar Messages

2 Cisco Iron Port (Cisco C370) Email appliances Solution Required

Hi All,
I NEED THE
technical proposal based on below requirements:
2 Cisco Iron Port (Cisco C370) Email appliances with below options for 3000 users licenses:
1) Anti-spam
2) Anti-virus
3) Content Filtering
4) DLP
5) Encryption (Optional)

Any technical proposals will need to be provided from your Sales Ops/Account team - or reseller. I would suggest opening a dialouge with them, in order to get the answer you are looking for. It will not come from the support forums.
http://www.cisco.com/web/services/order-services/index.html
https://grs.cisco.com/grsx/cust/grsCustomerSurvey.html?SurveyCode=4161&KeyCode=195185_1
http://www.cisco.com/en/US/products/ps10154/index.html
Hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

2 Cisco Iron Port (Cisco C370) Email appliances solution

i need
technical proposal based on below requirements:
2 Cisco Iron Port (Cisco C370) Email appliances with below options for 3000 users licenses:
1) Anti-spam
2) Anti-virus
3) Content Filtering
4) DLP
5) Encryption (Optional)

Any technical proposals will need to be provided from your Sales Ops/Account team - or reseller. I would suggest opening a dialouge with them, in order to get the answer you are looking for. It will not come from the support forums.
http://www.cisco.com/web/services/order-services/index.html
https://grs.cisco.com/grsx/cust/grsCustomerSurvey.html?SurveyCode=4161&KeyCode=195185_1
http://www.cisco.com/en/US/products/ps10154/index.html
Hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

Cisco iron port feature activation code error how to resolve that?

cisco iron port feature activation code error how to resolve that?

I have fixed this problem successfully.
The problem was with the referral attribute of the cfldap tag.
After adding this (referral="yes") attribute to my code I am able to login into my website.
<cfldap action="QUERY" server="#application.LDAPServer#" port="#application.LDAPPort#" start="#application.LDAPBase#" name="search" attributes="alias, dn, uid, technicalCareerLevel, locationorgunit, givenName, sn" filter="#filter#" scope="SUBTREE" maxRows="2" referral="yes">
Any way thanks for your assistance!!!!!

Cisco iron port

dear sir
i have a project for Iron port c170 and s170 the problem our customer need two c170 and two s170 to make clustering or redundancy.when i am searching i did not see any validation design clustering for c170 or s170 can you help me please
best regard

Additionally if the application is using the proxy settings but using some non standard port it might be blocked. Verify the port is allowed to go through by checking the Web Security Manager -> Access Policies -> Protocols and User Agents -> HTTP Connect ports. If the port is not allowed in there, it will not allow the application to create a connection.
Christian Rahl
Customer Support Engineer
Cisco Web Content Security Appliance
Cisco Technical Assistance Center RTP

How to apply on-demand ports activation license on DS-C9124-K9 ?

DS-C9124-K9
MDS 9124 fixed configuration (non-modular) multilayer fabric switch (includes 8 enabled ports; an on-demand ports activation license can enable 8 additional ports, up to 24 ports).
MDS 9124 Switch only
Dear sir,
With refer to the above, we fount only 8 port can be used on DS-C9124-K9 . This is the default license.
1. Please advise how to apply on-demand ports activation license to enable 8 additional ports ?
2. Please advise how to verify additional 8 ports have been successful activated.
Thanks and appreciation.

Please refere to this document
On-Demand Port Activation Licensing
http://www.cisco.com/en/US/products/ps5989/products_configuration_guide_chapter09186a00807b0ae4.html

ESA license upgrade

Hello Team!
In order to upgrade regular ESA licenses to Premium; is there a specific top part number or SKU for upgrade?
Thanks in advanced!

In short - no. I would suggest to reach out to the account team/Sales Ops. If you needed to upgrade the license, they would be able to work up the appropriate bill of materials, and incorporate that into the keys/bundle you have running on the appliance(s) currently --- and then take into account where you need to go, additional services that would be required.
You can also reach directly out to Global Licensing, in order to see if they can guide you through this process. They would be able to assist, based on the contract, serial number of appliance(s).
Please contact our Global Licensing Operations team:
https://tools.cisco.com/SWIFT/LicensingUI/Home
Licensing FAQ
Phone: 1-800-553-2447, opt 3
Request to have a case opened for GLO/Licensing.
Their email directly is: [email protected]
Hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

Questions about ESA license of ironport C370

Hello all,
We have two Cisco ironport C370 appliances.
There is one Product Authorization Key for the ESA Inbound Essentials SW Bundle (AS, AV, OF) License.
And there is a term called "entitlement quantity" for the ESA license.
The value of "entitlement quantity" = 1000
What is the meaning of "entitlement quantity" that is related to the ESA license ?
We would like to share the ESA license for two ironport C370.
Then is it means each ironport C370 get entitlement quantity of 500 ?
May you please help give advice on the questions above ?
Thanks very much !
Regards,
Roy

Answer to 1 :
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_man_license.html#pgfId-1053140
Answer to 2 :
Same link, it does state which licenses are non stackable.
For 3,
You probably may want to obtain a wireless service but do note of your requirements.

FL-CUE-NR-PORT-2 License

Is the FL-CUE-NR-PORT-2 license that comes with CME pernament or is it just temporary.

FL-CUE-NR-PORT-2 and FL-CUE-PORT-2= are marketing PID's that are not the actual licenses used on CUE. You would need to use the PAK that comes with your CUE purchase to request the license from Cisco.

AnyConnect for Cisco VPN Phone demo license

I want to test VPN Phone in the ASA5520,but "show ver" find the "AnyConnect for Cisco VPN Phone : Disabled", www.cisco.com/go/license i didn't find register AnyConnect for Cisco VPN Phone demo license, how to apply for the demo license??
Licensed features for this platform:
Maximum Physical Interfaces    : Unlimited
Maximum VLANs                  : 150
Inside Hosts                   : Unlimited
Failover                       : Active/Active
VPN-DES                        : Enabled
VPN-3DES-AES                   : Enabled
Security Contexts              : 2
GTP/GPRS                       : Disabled
SSL VPN Peers                  : 2
Total VPN Peers                : 750
Shared License                 : Disabled
AnyConnect for Mobile          : Disabled
AnyConnect for Cisco VPN Phone : Disabled
AnyConnect Essentials          : Disabled
Advanced Endpoint Assessment   : Disabled
UC Phone Proxy Sessions        : 2
Total UC Proxy Sessions        : 2
Botnet Traffic Filter          : Disabled
This platform has an ASA 5520 VPN Plus license.

Hi there,
Did you try
https://tools.cisco.com/SWIFT/LicensingUI/loadDemoLicensee?FormId=717
Cheers!
Rob
"Why not help one another on the way" - Bob Marley

How to tag spam mails in iron port and foreword to junk folder?

How to tag spam mails in iron port and foreword to junk folder?

As Dave has suggested.
Positively identified spam recommended actions would be to Drop it -- if you would like to review these emails and manually remove it, then send it to the spam quarantine
This can be changed under the GUI > Mail Policies > Click on Incoming or Outgoing mail Policies and edit the anti-spam settings per policy if needed.
Ideally suspected spam to be sent to the quarantine for further review.
If you do not wish to use a quarantine or drop the email, you can prepend the email as Dave also suggested and send it to the end recipient under [Suspected Spam] <Subject> for the end user to determine it.
However the IronPort will not make specific rules to deliver it to the MUA's Junk mail folder.
This type of setup is normally down to each specific end user to work with on their own MUA (outlook, lotus, safari etc.)
I hope this helps.
Regards,
Matthew Huynh

SMTP+Iron port out going mail issue

Hi,
One of the EBiz instance is configured with Iron port SMTP server for outgoing workflow mails.
Th IRONPOrt mails are relayed using round robin technique.
From the EBiz server OS if i fire mails the mails mails are relying using the round robin technique but from Oracle if i am firing some test mails all of them are relying though only smtp server where the scenario should be both the Iron port server should fire mails in a round robin fashion.
Just want to know if there is anything from Ebiz notification mails side we need to take care.
Ajay

Outgoing mail shouldn't be using port 993, that's an incoming mail port (IMAPS). Outgoing should be using either port 25, 587, or in some cases, 465.

Cisco Prime Collaboraiton Standard Licenses

Dear Team,
I have a customer purchased Cisco CUWL PRO & Enhanced Licenses for 10,000 Users for Unified CM version 8.0 and now he is asking for upgrade to version 10.5. The question is :
1-since he did reinstatement for different type of licenses and already has the order, Should the customer entitle Cisco Prime Collaboration licenses by default or he has to purchase them separately?
2-Does the customer going to receive Cisco Prime Collaboration Standard (Porvisioning and Assurance only) ?, If so for How many license Users it comes by default?. If less than 10000 ,then how to order the remaining?.
Thanks in advance
Regards,

Prime collaboration standard is free and does not require any licenses. Advanced license is separate from any UC user licenses:
Cisco Prime Collaboration Packaging: Standard and Advanced Options
Beginning with version 10.0, Cisco Prime Collaboration is provided in two different offerings. Cisco Prime Collaboration Standard is included with all Cisco Unified Workspace Licensing and Cisco User Connect Licensing, and Cisco Prime Collaboration Advanced is available for upgrade. The Standard option is only available and compatible with Cisco UC 10.0. The Advanced option supports Cisco UC 8.x - UC 10.x. The Standard option enables provisioning of all voice and video services purchased and fault monitoring across voice and video for a single cluster environment. For deployments that require more advanced management, Cisco Prime Collaboration Advanced offers multi-cluster scale, additional automation, deeper diagnostic capabilities, and long-term reporting. This order guide addresses Cisco Prime Collaboration Advanced only.
Customers who are interested in Cisco Prime Collaboration Advanced may activate the “Advanced Evaluation” from within the Prime Collaboration Standard GUI, for a 60 day term, or may purchase a permanent Cisco Prime Collaboration Advanced. For more information about license installation, please refer to the Cisco Prime Collaboration Quick Start Guide 10.0 posted on Cisco.com under ‘Install and Upgrade Guides.
from:
http://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/prime-collaboration/guide-07-729809.html
Chris

Cisco application networking manager license file - unable copy to server

Hi all
We tried all the options like ftp,tftp,scp,etc., to copy cisco application networking manager license file from my pc to its server which has CISCO ADE OS .But unable to copy .can anybody know correct method to copy ??
Thanks & Regards
Sanjeevi

Adrian,
In order to install the license you must have a license file on the ANM server and install it through the command line:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/application_networking_manager/4.1/installation/guide/IG_config.html#wpmkr1120937
No other way to do it.
License file can either be copied to the ANM file system, or you can create a new empty license file on it and copy paste the license file content.
If you have no access to the ANM server through CLI, then a workaround might be:
     - install a new VMWARE machine where you have CLI access.
     - install ANM on it
     - copy license (other you copy the file through any means or you create a file and edit by copy pasting the license file content)
     - install license with the command /opt/CSCOanm/bin/anm-license install /path/ANMxxxxxxxxxxxxxxxxx.lic as described in the link above
     - save the VMware image
     - deploy the same VMWare image to the ESX where it has to be installed and where you have no access to CLI neither you can copy a file.
Hope this helps,
Domenico.

Does Solaris 10 support cisco Virtual Port Channels over IP?

Does anyone know if Solaris 10 support cisco Virtual Port Channels open IP?

Hi user11114413,
The issue you are seeing actually has little to do with VIP, and more to do with there being multiple IP addresses for us to choose from on your box. For such multi-IP boxes, you'll want to tell us the IP to use, and in your case you want to tell as a VIP. This can be done either by editing your operational configuration file, and including an <address> element within the <unicast-listener> element, or via the tangosol.coherence.localhost system property. For example:
<unicast-listener>
    <well-known-addresses>
        <socket-address id="1">
            <address>1.2.3.260</address> 
            <port>8088</port>
        </socket-address>
    </well-known-addresses>
    <address>1.2.3.260</address> 
    <port>8088</port>
</unicast-listener>or
java ... -Dtangosol.coherence.localhost=1.2.3.260If you are using the same operational configuration on all nodes in your cluster then the system property approach is likely preferable, and would only be necessary on the two machines sharing the VIP.
As for using VIP or an extended WKA list, the choice is yours, either will work. If you do go the VIP route, it would obviously be a very bad idea to simultaneously use the same VIP and port at the same time from the two machines.
thanks,
Mark
Oracle Coherence

Cisco Iron port ESA licensing

Similar Messages

Maybe you are looking for