Securing Email with Email Security Appliance (SESA)

Describing Information Security Concepts.

• Information Security Overview.
• Assets, Vulnerabilities, and Countermeasures.
• Managing Risk.
• Vulnerability Assessment.
• Understanding CVSS.

Describing the Cisco Email Security Appliance.

• Cisco Email Security Appliance Overview.
• Technology Use Case.
• Cisco Email Security Appliance Data Sheet.
• SMTP Overview.
• Email Pipeline Overview.
• Installation Scenarios.
• Initial Cisco Email Security Appliance Configuration.
• Centralizing Services on a Cisco Content SMA.
• Release Notes for AsyncOS 11.x.
• Request Cisco AMP for Endpoints User Account.
• Verify and Test Cisco ESA Configuration.

Administering the Cisco Email Security Appliance.

• Distributing Administrative Tasks.
• System Administration.
• Managing and Monitoring Using the CLI.
• Other Tasks in the GUI.
• Advanced Network Configuration.
• Using Email Security Monitor.
• Tracking Messages.
• Logging.
• Perform Basic Administration.

Controlling Sender and Recipient Domains.

• Public and Private Listeners.
• Configuring the Gateway to Receive Email.
• Host Access Table Overview.
• Recipient Access Table Overview.
• Configuring Routing and Delivery Features.

Controlling Spam with Talos SenderBase and Anti-Spam.

• SenderBase Overview.
• Anti-Spam.
• Managing Graymail.
• Protecting Against Malicious or Undesirable URLs.
• File Reputation Filtering and File Analysis.
• Bounce Verification.
• Advanced Malware in Attachments (Macro Detection).
• Protect Against Malicious or Undesirable URLs Beneath Shortened URLs.
• Protect Against Malicious or Undesirable URLs Inside Attachments.
• Intelligently Handle Unscannable Messages.
• Leverage AMP Cloud Intelligence Via Pre-Classification Enhancement.
• Integrate Cisco ESA with AMP Console.

Using Anti-Virus and Outbreak Filters.

• Anti-Virus Scanning Overview.
• Sophos Anti-Virus Filtering.
• McAfee Anti-Virus Filtering.
• Configuring the Appliance to Scan for Viruses.
• Outbreak Filters.
• How the Outbreak Filters Feature Works.
• Managing Outbreak Filters.
• Prevent Threats with Anti-Virus Protection.
• Applying Content and Outbreak Filters.

Using Mail Policies.

• Cisco Email Security Manager Overview.
• Mail Policies Overview.
• Handling Incoming and Outgoing Messages Differently.
• Configuring Mail Policies.
• Matching Users to a Mail Policy.
• Message Splintering.

Using Content Filters.

• Content Filters Overview.
• Content Filter Conditions.
• Content Filter Actions.
• Filter Messages Based on Content.
• Text Resources Overview.
• Using and Testing the Content Dictionaries Filter Rules.
• Understanding Text Resources.
• Text Resource Management.
• Using Text Resources.
• Configure Attachment Scanning.

Using Message Filters.

• Message Filters Overview.
• Components of a Message Filter.
• Message Filter Processing.
• Message Filter Rules.
• Message Filter Actions.
• Attachment Scanning.
• Examples of Attachment Scanning Message Filters.
• Using the CLI to Manage Message Filters.
• Message Filter Examples.
• Configuring Scan Behavior.

Preventing Data Loss.

• DLP Scanning Process.
• Setting Up Data Loss Prevention.
• Policies for Data Loss Prevention.
• Message Actions.
• Updating the DLP Engine and Content Matching Classifiers.
• Configure Outbound Data Loss Prevention.

Using LDAP.

• Overview of LDAP.
• Working with LDAP.
• Using LDAP Queries.
• Authenticating End-Users of the Spam Quarantine.
• Configuring External LDAP Authentication for Users.
• Testing Servers and Queries.
• Using LDAP for Directory Harvest Attack Prevention.
• Spam Quarantine Alias Consolidation Queries.
• Validating Recipients Using an SMTP Server.
• Integrate Cisco ESA with LDAP and Enable the LDAP Accept Query.

SMTP Session Authentication.

• Configuring AsyncOS for SMTP Authentication.
• Authenticating SMTP Sessions Using Client Certificates.
• Checking the Validity of a Client Certificate.
• Authenticating User Using LDAP Directory.
• Authenticating SMTP Connection Over TLS Using a Client Certificate.
• Establishing a TLS Connection from the Appliance.
• Updating a List of Revoked Certificates.

Email Authentication.

• Email Authentication Overview.
• Overview of SPF and SIDF Verification.
• Configuring DomainKeys and DKIM Signing.
• Verifying Incoming Messages Using DKIM.
• DMARC Verification.
• Forged Email Detection.
• DomainKeys Identified Mail (DKIM).
• Sender Policy Framework (SPF).
• Forged Email Detection.

Email Encryption.

• Overview of Cisco Email Encryption.
• Encrypting Messages.
• Determining Which Messages to Encrypt.
• Inserting Encryption Headers into Messages.
• Encrypting Communication with Other MTAs.
• Working with Certificates.
• Managing Lists of Certificate Authorities.
• Enabling TLS on a Listener’s HAT.
• Enabling TLS and Certificate Verification on Delivery.
• S/MIME Security Services.

Using System Quarantines and Delivery Methods.

• Describing Quarantines.
• Spam Quarantine.
• Setting Up the Centralized Spam Quarantine.
• Using Safelists and Blocklists to Control Email Delivery Based on Sender.
• Configuring Spam Management Features for End Users.
• Managing Messages in the Spam Quarantine.
• Policy, Virus, and Outbreak Quarantines.
• Managing Policy, Virus, and Outbreak Quarantines.
• Working with Messages in Policy, Virus, or Outbreak Quarantines.
• Delivery Methods.

Centralized Management Using Clusters.

• Overview of Centralized Management Using Clusters.
• Cluster Organization.
• Creating and Joining a Cluster.
• Managing Clusters.
• Cluster Communication.
• Loading a Configuration in Clustered Appliances.
• Best Practices.
• Configure the Cisco SMA for Tracking and Reporting.

Testing and Troubleshooting.

• Debugging Mail Flow Using Test Messages: Trace.
• Using the Listener to Test the Appliance.
• Troubleshooting the Network.
• Troubleshooting the Listener.
• Troubleshooting Email Delivery.
• Troubleshooting Performance.
• Web Interface Appearance and Rendering Issues.
• Responding to Alerts.
• Troubleshooting Hardware Issues.
• Working with Technical Support.