Configuring Cisco/IronPort plugin for Outlook with CRES

With the discontinuation of the IronPort IEA appliances we are getting ready to move from our on-premise IEA appliances to CRES. I have a demo key for Encryption that I am running on my C660s and I have an Outlook client configured with the Email Security Plug-In version 7.2.0.39. Currently the Outlook Plug in is configured to point to our on premise IEA appliances for the Server URL attribute in Desktop Encryption Options and is working great.
My question is, what do I use to connect it to CRES for desktop encryption?
The Admin guide "Cisco IronPort Email Security Plug-in 7.2 Administrator Guide" page 4-46 just says "Server URL Enter the URL for your Encryption server."
Thanks

Hi Jason,
Thanks for your question. The short answer is https://res.cisco.com:443 HOWEVER please note the following two points. First, you will need a CRES account, so that you can download a token to use with the plugin, to authenticate to CRES; you cannot use the default token which you have probably been using with your IEA. Second, using the current Outlook plug-in version 7.2 with CRES is not supported; it works, but it is not supported. There are plans to release a supported version.

Similar Messages

IronPort PlugIn for Outlook .enc files?

We have started to roll out the IronPort plugin for Outlook for both Encryption and SPAM reporting. On the SPAM reporting side I do see the e-mails that are getting reported but the e-mails are formatted differently.   I am guessing that the original e-mail being reported is now in the .enc attachment? Is there any way that I can view these so that I can see what kind of e-mail is being reported by my users? In the past I would check in on this from time to time and see if there were any mass e-mails that were getting through that I needed to create a custom filter for, now with these .enc files I'm not sure I can do that anymore.
I'll post one of the .enc files here in a bit.
Jason

So I can confirm that the new 7.4 Outlook plugin, feature does work to submit spam/phish/virus as plaintext. Basically you just need to set (ignore the attachment name option):
<report>
        <format>plain</format>
        <subject>Cisco Email Security Plug-in Report (${reportType})</subject>
</report>
Also for those upgrading to 7.4, be sure to manually upgrade yourself first, and set all your configurations using the BCE_config file first. Then follow the admin document for deploying the config file mass. The 7.3 and older config files will not work with the new plugin.
This configuration is only recommended if you will be checking report submissions or using some form of Phishing education solution and want to exclude these e-mails from actual submission. Here is a good outline how I implemented it. If anyone is interested I can probably do a quick video demonstration while it's all fresh in my mind and post it here.
1. Create one or more Quarantines (either on your central SMA or individual ESA/Ironport):
Example: Reported_TestPhish (delete after a period of time), Reported_Spam, Reported_Phish, Reported_Virus, Reported_Ham, Microsoft_Junk
2. create a Outgoing Mail filter that matches a header in your Test Emails so you can capturing them.
Example Match Content in Attachment: X-TEST(replace with your header) and if you use the Microsoft Report Junk Plugin, you should also use the condition to match the same text inside the mail body. Then point the action to Quarantine to your Report_TestPhish where after a period of time it will be deleted. I choose to use Quarantines rather then sending e-mails via notifications, but you could do this as well, for example if your Email Education provider can use the e-mail to track which employees reported the test e-mails for you.
3. Create individual Outgoing filters using the recipient email address to dump it into the right Quarantine. This will allow you to to not only Quarantine and view the messages, but also will add to your reporting. You can choose to use fewer Quarantines and filters to bundle together to fit your requirements.
4. Rather then adding these filters to your default policy, I suggest creating a new Outgoing Mail Policy called Report_Email (using the recipient email addresses). I then disable some of the policies such as DLP, A/V, and so on as needed and only apply the new filters we just created.
Hope this was useful for someone out there.

Configuring Cisco ASA 5520 for Outlook Anywhere - Exchange 2007

I have enable and configured our Exchange 2007 for Outlook Anywhere. When I try to get Outlook from home to connect it fails. We have an Cisco ASA 5520 firewall at work, is there something I need to setup on the device? We want to allow users from
home to connect via their Outlook clients from home. OWA is working from the outside... Help please...

Hi,
Make sure that the required ports are allowed over he device. The users can access through port 25/443 etc. and should be opened. Better, to go for a test at www.testconnectivity.microsoft.com
Regards from ExchangeOnline.in|Windows Administrator Area | Skype:[email protected]

SCCM Installation Ironport Plugin for Outlook - CustomConfig files

I'm attempting to install the Ironport Plugin via SCCM. Our client is version 7.2.0.039. Pretty standard executable install, however, I need to use the UseCustomConfigs switch to set configurations in the client when it reaches our 2500 machines. My issue is with the syntax of the UseCustomConfigs switch. I am running the CiscoEmailSecurity-7-2-0-039.exe from a local folder on our SCCM server, not via UNC. I have the executable, the setup.iss, and the 2 config files that I need in that working directory. Below is the syntax I've tried. SCCM attempts to retry the install, but of course it fails......
CiscoEmailSecurity-7-2-0-039.exe /s /v"UseCustomConfigs=" /qn /f1 "setup.iss"
I guess my hangup is what do I put after the "=" if I'm running it from the directory that the executable is running from.....

Yes and no.....I did get the install to roll out via SCCM. It does install, but it fails more than half of the time. I'm then forced to use the Right Click Toolkit to rerun the advertisement on the machines that it "failed" on, and then it installs. I always end up with error code -3. In some cases it has failed because the user had Outlook open, but in other cases, it fails and I've got no real clue as to why......

Need some help understanding plugin for Outlook

Testing out the 7.3 plugin for Outlook. I am not clear on how the flagging of spam/not spam etc. works. We have local IronPort devices. We are not cloud based. When a user flags a message as spam in the Inbox, the Admin Guide says Cisco updates the anti-spam filters so the user will not receive emails like this in the future. Not clear how this works. I understand the email is getting submitted to Cisco for analysis but how do they update spam filters for just that one user? I can understand if we were using a cloud device but as I said we have local hardware. Need to understand this process and the Admin Guide falls short of explaining it.

Reporting spam/phish from Outlook via the plug-in only does that. It is packaging up the message and sending the message example off to our @access.ironport.com address for submission from that end-user. The plug-in itself is not actually doing any work to update the anti-spam on your appliance. These submissions are a work by themselves that is submitted and then reviewed from the rules writing process. In time, these submissions are scored, updated, and then written into the current IPAS (IronPort Anti-Spam) rules sets that are published back out to the ESA(s) themselves. So - as long as your ESA is set to get updates (by default, each 5 minutes), then you will get the updated rules --- and these rules are for everyone globally.
Hope that helps! If not - let me know.
-Robert

Voicemail plugin for outlook

Hello:
Any info about developing a voicemail plugin for outlook using JMF? Or any such stuff already available?
I have to provide my users a voicemail recording/sending option in their outlook clients. Similarly they should be able to listen to received voicemails using a control or something like that in their outlook interface.
On the other hand, I also need to provide to my users coming through my webmail interface with this option of sending/listening voicemails.
Please suggest how can JMF be useful to develop/integrate these features.
Thanks
candidcarper

Hello:
Any info about developing a voicemail plugin for outlook using JMF? Or any such stuff already available?
I have to provide my users a voicemail recording/sending option in their outlook clients. Similarly they should be able to listen to received voicemails using a control or something like that in their outlook interface.
On the other hand, I also need to provide to my users coming through my webmail interface with this option of sending/listening voicemails.
Please suggest how can JMF be useful to develop/integrate these features.
Thanks
candidcarper

Spotlight Plugin for Outlook 2011 available?

Hello,
does anyone know if there is a Spotlight Plugin for Outlook 2011? Now I can't preview the messages if they come up in a search. Google, the Apple and the Microsoft website do not seem to contain any information on this.
Kind Regards,
Edwin

This plug-in is fine, but it works only if Outlook is running.
I have both Mac Mail and Outllook 2011 installed on my MacBook and I was going crazy because Spotlight shows by default the Outllook mails in the result list - and they can't be properly previewed.
To disable Outllook mails in Spotlight results, just add the "Microsoft User Data" folder (which lies in your Documents folder) to Spotlight's "Privacy" section.
Spotlight will now show mails as Mac Mail in the result list an you'll be able to preview them.
Of course your Exchange account(s) need to be proprerly set up in Mac Mail.
Hope that helps.

Adobe plugin for Outlook in 2013 unable to configure to load at startup

Windows 7 Pro, Office 2013 Home and Business
I don't see a registry key for the plugin, there's no properties in Outlook for the plugin
Manually loads properly and functions properly, however unable to configure it to load when Outlook starts.
Any ideas?

Hi jeremyh77032804,
Please open Outlook and go to 'Tools > Options > Add-Ins' and select 'COM Add-ins' option under Manage label and click Go.
From the new dialog box that appears, select Acrobat PDFMaker Office COM Addin and click OK.
Also, please confirm the location of PDFMaker add-in is under "C:\Program Files (x86)\Adobe\Acrobat 11.0\PDFMaker\Mail\Outlook"
Do you have the administrative privileges to this location specified above?
Please let me know.
Regards,
Anubha

How to configure Cisco ASA 5500 to work with the iPhone

We have Cisco ASA 5510 (latest firmware version), and apparently, according to Cisco website it is compatible with new iPhone 3G's IPSec client:
http://www.cisco.com/en/US/docs/security/vpnclient/cisco_vpnclient/iPhone/2.0/connectivity/guide/iphone.html
We've setup our first iPhone properly. It connects fine to the network, shows VPN connection as active. Gets a private IP address. But does not let any traffic go to the internal network. We thought it might be DNS problem, but it cannot connect to Exchange server even when using IP address instead of DNS. No luck either.
After checking ASA logs, we found that iPhone goes through Phase 1 authentication correctly. But then gives some kind of error, mentioning "Attribute 5".
Has anybody been successful configuring ASA5500 series (in particular 5510) to be used with iPhone?
I noticed that many people are having these problems.
Please do not post to this topic if you have ANY OTHER Cisco device.
Cisco specifies that iPhone is compatible only with Cisco ASA 5500 Security Appliances and PIX Firewalls. Neither Cisco IOS VPN routers nor the VPN 3000 Series Concentrators support the iPhone VPN capabilities.
Let's keep this topic only for users of ASA 5500 series and PIX Firewalls.
It would be extremely helpful for a large number of users if somebody posted a list of settings for ASA5500 or PIX firewall that DO work with iPhone 2.0
Thank you!
Oleg R

We found the solution and a bug in Cisco firmware (seems to be a bug).
First of all, thanks to our Chief Systems Architect Seb, here is a config that worked for us on a Cisco 5520 (latest firmware).
access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
access-list iphone_splitTunnelAcl standard permit <insert ip> <insert mask>
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set iphone esp-3des esp-sha-hmac
crypto ipsec transform-set iphone mode transport
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set pfs
crypto dynamic-map SYSTEMDEFAULT_CRYPTOMAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 iphone
crypto map outside_map 10 match address vpn
crypto map outside_map 10 set transform-set ESP-AES-256-SHA
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEMDEFAULT_CRYPTOMAP
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 20
authentication pre-share
encryption aes-256
hash sha
group 5
lifetime 86400
crypto isakmp nat-traversal 20
group-policy iphone internal
group-policy iphone attributes
wins-server value <insert ip> <insert ip>
dns-server value <insert ip> <insert ip>
vpn-tunnel-protocol IPSec
ipsec-udp enable
ipsec-udp-port 10000
split-tunnel-policy tunnelspecified
split-tunnel-network-list value iphone_splitTunnelAcl
default-domain value <insert domain name>
tunnel-group iphone type remote-access
tunnel-group iphone general-attributes
address-pool VPN-Pool
authentication-server-group ActiveDirectory2
default-group-policy iphone
tunnel-group iphone ipsec-attributes
pre-shared-key <insert pre-shared key>
For iPhone you have to be using IPSec tab for configuration.
We tried to set up this config using the wizards, but it would not work.
Later it turned out that wizards by default set this setting:
"crypto isakmp nat-traversal 20"
equal to zero and there is no way to change it from the GUI.
Only after we changed it (increased the value from 0 to 20) through the command line the connection started working perfectly.
Please let me know how it works out for you.
Message was edited by: Rogik
Message was edited by: Rogik

Installing CRM Online for Outlook with multiple profiles

For a number of reasons I have had to create multiple profiles in Outlook. I also have a Microsoft CRM account. Up to this point I have been able to successfully install and use CRM for Outlook on my previous profiles. However, when the last profile was
created the CRM for Outlook functionality did not install. / transfer. I have tried uninstalling the CRM for Outlook and reinstalling. No luck it only crashed an old profile which appears now to be inoperable. It is essential that I get the latest Profile
working the CRM for Outlook Any suggestions?

Hi,
As per the description, I understand that it's an issue about CRM Online for Outlook.
This is the forum to discuss questions and feedback for Microsoft Office client. To get better assistance, I would suggest you to post in
Microsoft Dynamics CRM Forum, where you can get more experienced responses:
https://community.dynamics.com/crm/f/117.aspx
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.
Regards,
Ethan Hua
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.

Installing and Configuring Microsoft IIS plugin for weblogic server

Hi guys,
I want to navigate from "a page in website hosted on IIS" to "a page in application hosted on weblogic". I found out that there is a plugin for Microsoft IIS that can proxy requests to weblogic server. The documentation of the plugin can be found on the following address:
Webserver plugin
I want to know about the configuration of machines. Can IIS and weblogic be on the same machine or different machines???? Where i have to install the plugin????
I am not able to find this in the above documentation.
My environment is:
1) Weblogic Server 10.3.5 installed on windows server 2012.
2) Forms and Reports 11gR2 are installed on this weblogic server
3) Apex Listener is also installed on the weblogic which communicates with a different db server.
4) I also want to install JDeveloper and ADF on the same weblogic server and call applications developed in ADF (like jsp page) from Microsoft IIS website.
Please help me and give me suggestions.
Regards,
Waqas

There is a free ebook here:
http://www.microsoft.com/en-us/download/details.aspx?id=30384
It's also the title of a section of technet but that's not available in printed format as far as i know.
http://technet.microsoft.com/en-us/library/cc262957.aspx

Fedora 13: After upgrading from FF3.6 to FF6.0.2 I no longer have a Java plugin. How do I configure the Java Plugin for FF 6 ? There is no Java Plugin at the site

I am Fedora 13x64 bit. I just installed FF v6.0.2 from the FF download site. I backed up the existing FF 3.6 as firefox_old
I need to have a Java plugin to access company site, how do I configure the Java Plugin ?
At the Plugin area in FF6 there is no Java Plugin available, even after a search.
I have Java 1.6.0 installed in the OS at:
/usr/lib/jvm/java-1.6.0/jre/lib/amd64/libnpjp2.so
I googled how to configure Java Plugin for FF 6 for Fedora 13 and the trick was to create a soft link from /home/<userID>/.mozilla/plugins to the above libnpjp2.so

AVtech wrote:
. . . If a person can't get an answer here I don't know where else to turn since Sun certainly wouldn't offer tech support for a free product . . .These forums are user forums, and only occasionally visited by Sun employees. Sun does provide Java technical support options, although (of course) at a charge.
See:
http://developers.sun.com/services/
. . . I guess we'll just use JRE 5 until it's unsupported, whenever that will be. I'm still waiting for an answer on that question, too. See:
http://java.sun.com/products/archive/eol.policy.html
http://www.sun.com/service/eosl/
This document (part IV and Appendix) has some debugging and troubleshooting information that may allow someone involved in the problem to resolve the cause:
See:
http://java.sun.com/javase/6/docs/technotes/guides/plugin/developer_guide/contents.htm
Any steps that you can take to isolate the problem to specific Java versions, browsers, applets, web sites, operating systems (and versions), etc, would enhance the possibility of getting help.
You can try the applets at this Sun location and see if any of them are "slow".
See:
http://java.sun.com/javase/6/docs/technotes/samples/demos.html

URL for apache plugin for linux with weblogic 6.1

Hi,
can anyone tell me, where i can find the apache plugin for linux weblogic 6.1
thanks in advance,
cheers chris

Could you give some detail for this issue? I have tried the plugin with IIS6 and it does works.

How to configure wls-maven-plugin for support remote actions ?

hi,
currently I installed weblogic 12.1.1.0 .
also using wls-maven-plugin for deployment .
in documentation specified that
middlewareHome ,weblogicHome ,domainHome has defaults values .
so when you are not set them explicitly plugin use defaults values
[http://docs.oracle.com/cd/E24329_01/web.1211/e24368/maven.htm#WLPRG585|http://docs.oracle.com/cd/E24329_01/web.1211/e24368/maven.htm#WLPRG585]
whats happened if I want to do remote deployment meaning packaging my artifacts in machine A and deploy it to a server on target machine B .
some limitations
1. I cant use share folder between A and B
2. Installation location on B is not on the default path - "D:\weblogic\wlserver_12.1"
how plugin should know those require values on machine B , where the execution of the maven goal take place on machine A?
does any body knows if the plugin support this case of remote deployment or does this plugin support only local deployment ?
what is the best way to do remote action like start-server , stop-server, deploy , undeploy with weblogic app-server
Thanks
Nir
Edited by: lukass77 on Nov 13, 2012 3:36 PM

hi,
currently I installed weblogic 12.1.1.0 .
also using wls-maven-plugin for deployment .
in documentation specified that
middlewareHome ,weblogicHome ,domainHome has defaults values .
so when you are not set them explicitly plugin use defaults values
[http://docs.oracle.com/cd/E24329_01/web.1211/e24368/maven.htm#WLPRG585|http://docs.oracle.com/cd/E24329_01/web.1211/e24368/maven.htm#WLPRG585]
whats happened if I want to do remote deployment meaning packaging my artifacts in machine A and deploy it to a server on target machine B .
some limitations
1. I cant use share folder between A and B
2. Installation location on B is not on the default path - "D:\weblogic\wlserver_12.1"
how plugin should know those require values on machine B , where the execution of the maven goal take place on machine A?
does any body knows if the plugin support this case of remote deployment or does this plugin support only local deployment ?
what is the best way to do remote action like start-server , stop-server, deploy , undeploy with weblogic app-server
Thanks
Nir
Edited by: lukass77 on Nov 13, 2012 3:36 PM

Recommendation for time/pitch plugin for use with Logic?

I'd like to get a pitch/time stretch plugin for logic, what do people recommend?
Thanks.

Melodyne
Eddie

Configuring Cisco/IronPort plugin for Outlook with CRES

Similar Messages

Maybe you are looking for