Deploying Cisco ESA without Internal Mail_Server

Hello Experts,
We have hosted our company email server into an External Company (Mail Hosting Company), and our internal Users are all connecting directly to that external company mail-server for accessing thier emails. we donot have anyother internal Mail_Relay Server inside our company.
My Question is can we put any Cisco Ironport Email_Security in this environment so that we have security for our emails ? without having any internal email-relay server ?

I think the answer is yes but it depends. If the mail hosting includes the Internet mail gateway (your MX records point to the hosting company) then there's not much you can do about inbound protection. If it is just hosting groupware and your MX records can point to your inhouse IronPort then you can do all the normal inbound protection (anti-spam, anti-virus, content checking, etc) and then pass it to the hosted groupware using SMTP as normal. You would want to use TLS as you are likely going over the Internet to the hosting company. Similarly for outbound protection, TLS from the hosted groupware to your inhouse IronPort which can do the normal anti-virus, content checking, encryption, etc. You would have to factor in the extra bandwidth as all your mail will be flowing to and from the hosted environment. Basically it is just lke any other installation with IronPort talking to groupware e.g. Exchange over SMTP but in your case that connection would be remote not local so you need to take appropriate steps (such as TLS) to protect the traffic. But as I said at the start it depends on the hosted environment, what is being hosted and how much control you have over the configuration. Hope this helps.

Similar Messages

Cisco ESA Deployment

Hello Everyone,
I have seen deployment guides of Cisco ESA stating that the ESA is to be deployed in the DMZ network
Can We deploy Cisco ESA and also the internal mail server in the same network ?

You can, but you need to make sure that email (inbound and outbound) flows through the ESA and nothing is direct to your email server. Putting ESA on the edge does make the deployment and future troubleshooting easier.
Hope it helps.

CISCO NAC deployment with ASA for internal servers (DMZ)

We have deployed cisco ASA for our clients access to DMZ servers few months ago. Now we want to integrate cisco NAC solution without removing ASA
from infrastructure. What will be the best deployment mode of cisco NAC so that clients can also pass through cisco ASA access list also for filtering before reaching to dmz servers.
what gateway clients will use. Plz help.
Should i use Virtual Gateway or Real Gateway for NAC. Client should first come to NAC(CAS) and then through ASA to reach DMZ servers.

Hello,
This should work. Please review the attached PDF for more clarity on this topic: https://supportforums.cisco.com/docs/DOC-9102
HTH,
Faisal

Deployment runs into an internal error NI installers

Hi,
When I try to deploy my system in TSv4.1.1, the deployment runs into an internal NI installers problem. Error in deployment status log is "An internal error occurred involving an installer function. This type of error usually involves a problem with one or more National Instruments Installers. For more information open the following log file:
...\Temp\Detailed_Installer.log (path replaced). " I can't find any suspicious in that file. I can even find error line in status log stating "Error Code:-603 Read Registry Value STR.vi".
What I have done is that I have upgraded from TSv3.5 to TSv4.1.1 which is now running in a new computer. I use the same .tsw file as in v3.5. I have verified and I suppose all files in .tsw have correct paths according to changes made from 3.5 to 4.1.1. I use some old DLLs compiled in CVI 8.x included in .tsw.
I have even tried a create a new deployment file without any further success.
I even get the internal error message window above when I access installer options tab and drivers and components window after pressing OK or cancel button.
any help ?
regards,
petri

hi,
Attached a status log from a new workspace with a project and sequence file. Deployment is as well a new.
I can't find *.vis from harddrive.
Installation is FDS from NI developer Suite fourth Quarter 2008 DVD.
regards,
petri
Starting Log.
Error occurred
Error Code:-603
Read Registry Value STR.vi
Starting Analysis
Starting to process workspace file
Workspace Processed
Finished Analysis
+++++++++++++++++++++++++++++++++++++++
Error occurred
Error Code:-30
TestStand - Deployment Utility Splash Screen.vi >> TestStand - Distribution Wizard GUI.vi >> TestStand - Additional Components Dialog.vi >> TestStand - Reselect Meta Installer Products.vi >> TestStand - Get Dependencies of TS Engine.vi >> MDFProdPreview_AddProduct.vi
{95C82647-A6CB-492F-A5A9-66A282CAD7F3}
An internal error occurred involving an installer function. This type of error usually involves a problem with one or more National Instruments Installers. For more information open the following log file:
...\Temp\Detailed_Installer.log

Can we combine Query for cancelled requisitions and query for internal requisitions without internal sales order into a single query

Hi All,
Greetings.
I have two queries namely,
1.Query for cancelled requisitions and
2.Query for Internal Requisitions without Internal Sales Orders.
I was on a task to combine those two queries..
Can we do that? if so, please help me do that..
Thanks in Advance,
Bhaskar.

Hi All,
Greetings.
I have two queries namely,
1.Query for cancelled requisitions and
2.Query for Internal Requisitions without Internal Sales Orders.
I was on a task to combine those two queries..
Can we do that? if so, please help me do that..
Thanks in Advance,
Bhaskar.

How to deploy the OS without Partioning the Drive , Refresh Deployment Senarios

Hi ,
I need to configure the reuired settings for below things in MDT. If these are possible in MDT can you please share the required configuration with Steps.. I am using MDT 2013 for deploying Windows 8.1.
1. OS deployment should be without partitioning
2. All user Profile data should taken before OSD and after OSD all the user profile data backup should be restore Auto on its original location.
3. no any user data located even in Local C drive or in other Local Drive- D or E delete..
Shailendra Dev
Shailendra Dev

Shailendra,
You'll need to brake this up into 2 or 3 cases.
One, not formatting and partitioning the drive, if you use the REFRESH scenario, the existing operating system drive will be cleaned (not formatted) and Windows will be installed on this drive
Two, with the User State Migration Tool you'll be able to achieve what you want, either using symbolic (hardlinks) or transfer the data into a migfile which can be copied to a fileshare or external drive, and copied back once the machine is finished.
Third, check for any remaining folders and files, by for example deleting all content other than the usual files and folders that are present after a fresh Windows installation.
Good luck!
If this post is helpful please click "Mark for answer", thanks! Kind regards

How to get 300 mbps on Cisco LAP1142N without WLAN Controller

Hi,
Anyone using Cisco LAP1142N without Wireless LAN Controller and getting 300mbps throughput? I am only using 5 GHz (Manually Disabled 2.4) but i am getting only 144 mbps max throughtput. It would be great if someone can help me to achive around 300 mbps from this AP.
Thanks in advance.

Thanks for your reply. Yes, using Authentication-> open. Under the Radio interface using Channel Width 40-above. Checked with a laptop and it connects with 144 mbps and not getting more then that.
Here is a part of the config:
===================
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap
enable secret 5 $1$0M/H$HIkGshtMt9w5q.KqNvMQf/asdf
no aaa new-model
no ip domain lookup
dot11 syslog
dot11 ssid TestN2
authentication open
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
shutdown
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
ssid TestN2
antenna gain 0
no dfs band block
speed basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
channel width 40-above
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
bridge 1 route ip
line con 0
line vty 0 4
login local

Can I deploy Mathscript subfunctions without revealing .m source code?

Good morning.
I am developing MATLAB algorithms containing functions and subfunctions. To integrate them in LabVIEW, I plan to use Mathscript nodes. And if I do so, I have to leave the subfunctions .m files in a repository on the PC (right?).
My problem is that I do not want to reveal these easily readable files when deploying my LabVIEW code. So I am looking for a way to deploy this code without making my source code available and open to all.
Thanks for any help!

Thanks smercurio.
smercurio_fc wrote:
I think Ravens Fan was referring to actually putting the MathScript code inside a MathScript node, not leaving it as its own file. That way the code is saved with the VI.
Please allow me to illustrate my question through an example.
Let's say my code is script S1. S1 contains functions f1, f2 and f3, f1 contains subfunctions sf1 and sf2, and so on. I end with a code structure looking like this one (all .m files):
S1
- f1
---sf1
---sf2
-f2
---sf3
-f3
---sf4
---sf5
If S1 is copied in a Mathscript node, how can it work without leaving f1.m, sf1.m and others available on the user's pc after deployment?
Now, as I understand from my readings and my experimentations, when I put the function and subfunction files in the "LabVIEW Data" file, the functions name in the script S1 copied in a Mathscript node will appear in purple (by default). The node executes fine then. But if I copy the functions in Mathscript nodes in other VIs, the functions name appear in grey, and the node won't work. I don't know how to point to these other Mathscripts... Is there something I miss here?
smercurio_fc wrote:
You started out by saying you're developing Matlab algorithms. You should keep in mind that MathScript and Matlab are two different languages. While there are many similarities, there are also a lot of differences, and Matlab code is definitely not 100% compatible in MathScript. Thus, if you write the code in Matlab there is no guarantee it will even work in MathScript.
Thanks for the warning. I tried my algorithms using the method described above, and they work well.

Cisco ESA reporting on a Nagios monitor ?

Hi,
Is it possible to exploit the reporting of ESA on a third-party software like Nagios ? How to get a real-time reporting (material status, queue, quarantine), from Cisco ESA to a monitor of a an administration software like Nagios ?
Best regards

hi kishor,
I am not sure if this helps you, but try using BW statistics info providers.refer this links..
http://help.sap.com/saphelp_bw30b/helpdata/en/8c/131e3b9f10b904e10000000a114084/content.htm
http://help.sap.com/saphelp_nw04/helpdata/en/8c/131e3b9f10b904e10000000a114084/content.htm
BW Statistics
Bw statistics
hope it helps,
regards,
Parth.

Licensing for Cisco ESA c380

I am putting a recommendation together for a client to upgrade their existing Cisco ESAs and trying to figure out how the licensing works.
We are looking at c380s across multiple sites, upgrade from their current models which are c160s. Questions:
1.) Do the mailbox licenses need to be procured separately for each c380. For e.g., if the total mailbox no. is 20000 across 4 sites, can the mailbox licenses be bought together and 'split' on individual installs of c380s OR they have to be bought separately for each c380.
2.) If upgrading from the existing ESAs to new, can the licenses be imported from the existing c160s (which will be decommissioned) and exported to the new ESAs?

1) each hardware appliance is licensed separately. You'll need to work with account team/reseller to provide the #/size license as appropriate.
2) If upgrading - yes, you'll just need to transfer the existing "as-is" license from the serial number of the existing appliance to the serial number of the newly purchased appliance. Should be fairly exact to the RMA steps provided in the following article:
http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118000-technote-esa-00.html
I hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

License Cisco ESA in Cluster Configuration

Guys,
Do you have any idea about license Cisco ESA in Cluster Configuration
> If i have two appliance in cluster configuration and i have 1000 user, which option for license i must buy ?
1. Just one license for two appliance (which in cluster configuration) with 1000 user capacity
2. Two license with 500 user capacity for each appliance, appliance 1 with 500 user capacity license appliance 2 500 user capacity license
3. Other license.
BR

You only need to buy 1000 user licenses for which ever options or packages you buy. The only option that is not based on the number of users is if you want a Cisco Content Security Management Appliance or SMA for centralized reporting and quarantine.
Another good thing to note, is that if you have a virtual environment the hardware appliances are no longer required, and are not nearly as expensive as they were in the past. So depending on your requirements you may be off the ground pretty quick.
Also make sure to get all your features bundled. I would at least get AMP, Sophos A/V, DLP, and Encryption. This also means you can transfer and copy your license to as many appliances (Physical or Virtual) you need to support your environment.

How to do AUC scenario without Internal Orders concept?

HI,
I need to do AUC scenario without using Internal Order concept. Kindly tell me the Process flow for it. It would be a great help for me if anyone can gives the Inputs..
Thanks
Kishore

Hi Kishore
See if this thread helps you
Settle AUC without internal order
Regards
Zubin

How to deploy Cisco ISE agents through SCCM 2012 R2

Hi,
We are deploying Cisco ISE in our setup. we need to deploy following 3 .msi & 1 .xml files to 3000 PCs through System Center 2012 R2 Configuration Manager.
The configuration.xml file must be deployed in specified (%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\NetworkAccessManager\newConfigFiles) location.
anyconnect-nam-win-4.0.02052-k9.msi
anyconnect-win-4.0.02052-pre-deploy-k9.msi
nacagentsetup-win-4.9.0.42.msi
configuration.xml
The above 3 .msi files should be installed silently and configuration.xml file to be copied to said location.
I want to create one package to deploy 3.msi files at once and another package for .xml file.
or
Is there anyway to create in one package to install the .msi files first and copy the .xml file as well.
Any idea please.
Regards,Ali

Hi,
Have you tried to create a script.
You can easily test this by running your script manually with psexec -s
to emulate running as SYSTEM account.
Reference:
Robocopy
https://technet.microsoft.com/en-us/library/cc733145.aspx
Windows Installer : MSIEXEC Silent Install End to END
http://sccm2o12.blogspot.com/2010/04/windows-installer-msiexec-silent.html
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Deploy WebDynpro application without SDM password

Is it possbile to deploy WebDynpro application without SDM password? I have account with SAP_J2EE_ADMIN role.

hai,
go to server path
open the dos editor
go to this dir
usr/sap/j2e/jcXX/sdm/program
x:usr/sap/j2e/jcXX/sdm/program\>
StopServer
sdm jstartup "mode=standalone" "sdmhome=."
sdm deploy "sdmhome=." "file=xxx.ear" "onerror=stop"
sdm jstartup "mode=integrated" "sdmhome=."
StartServer
use the above commands one by one
regards,
Naga Raju

Settle AUC without internal order

Is it possible to settle AUC without Internal Order???

Hello,
Yes, it is possible. You can settle AUC in two ways
1. through internal order (KO88)
2. Through distribution and settlement (AIAB and AIBU)
The major difference between the two is that in case of Internal Order you can establish budgets in the Internal Order which is Control the costs. But in case of direct posting to the AUC, you would not be able to control the cost.
In the Internal Order scenario all the cost is first pooled to the Order and then settled to the Asset at regular intervals. Where as in case of the second method all the expenses are posted directly to the AUC and then it is being Distributed and settled to various Assets as required
1. Asset settlement thought internal order is general used for assets under construction. All costs are pooled in the internal order. Periodically or whenever wants the internal order is settled (within a fiscal year) i.e. the amounts in the internal order are capitalized.
First create an internal order (KO01), take object class as investment and give investment profile. Now system asks and creates one AUC account under asset class 4001.
Then create settlement rule (KO02) and release the order (control data tab) Post some amounts (like wages or non-production material) to internal order. Then come to KO88, first take the automatic settlement and run.
The accounting entry passed is
Asset under construction a/c Dr
To Wages a/c
If you want to complete the settlement to auc, then take now full settlement option and run then accounting entry passed is
Asset a/c Dr
To Asset under construction a/c
While doing settlement in KO88, you can give any settlement period, posting period and asset date, but all should be in the same fiscal year. If you want to close the order go to KO02, give order number and take control data tab and click on technical complete tab on the screen and save. Internal order will be closed.
2. If your AUC is under Asset class 4000
this auc account is created directly because of direct postings to AUC account. Posting are made through F-90 For example
AUC a/c dr
To vendor or bank account
Go to AIAB ---> Give distribution rule and go to AIBU --> Settle the asset
Entry passed is
Asset a/c Dr
To AUC a/c
Thanks
Para

Deploying Cisco ESA without Internal Mail_Server

Similar Messages

Maybe you are looking for