User Guide

Contents
xvii
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Enabling a Listener to Validate Incoming Mail Via the SMTP Server 22-6
Configuring LDAP Routing Query Settings 22-6
SMTP Call-Ahead Query Routing 22-7
Bypassing SMTP Call-Ahead Validation for Certain Users or Groups 22-8
CHAPTER 23 Encrypting Communication with Other MTAs 23-1
Overview of Encrypting Communication with Other MTAs 23-1
How to Encrypt SMTP Conversations using TLS 23-2
Obtaining Certificates 23-2
Intermediate Certificates 23-3
Certificates and Centralized Management 23-3
Creating a Self-Signed Certificate using the GUI 23-3
Importing a Certificate Using the GUI 23-5
Creating a Self-Signed Certificate or Importing a Certificate using the CLI 23-6
Exporting a Certificate Using the GUI 23-6
Enabling TLS on a Listener’s HAT 23-6
Assigning a Certificate to a Public or Private Listener for TLS Connections Using the GUI 23-7
Assigning a Certificate to a Public or Private Listener for TLS Connections Using the CLI 23-8
Logging 23-8
GUI Example: Changing the TLS Setting for Listener’s HAT 23-8
CLI Example: Changing the TLS Setting for Listener’s HAT 23-9
Enabling TLS and Certificate Verification on Delivery 23-10
Sending Alerts When a Required TLS Connection Fails 23-11
Logging 23-12
CLI Example 23-12
Managing Lists of Certificate Authorities 23-16
Viewing the Pre-Installed list of Certificate Authorities 23-17
Disabling the System Certificate Authority List 23-17
Importing a Custom Certificate Authority List 23-17
Exporting a Certificate Authorities List 23-18
Enabling a Certificate for HTTPS 23-18
CHAPTER 24 Configuring Routing and Delivery Features 24-1
Routing Email for Local Domains 24-1
SMTP Routes Overview 24-2
Default SMTP Route 24-2
Defining an SMTP Route 24-3
SMTP Routes Limits 24-3