Students who take this SESA training learn to use Cisco Email Security Appliances (ESAs) to manage and troubleshoot email in their networks. Attendees of this SESA course receive in-depth instruction on popular features, emphasizing topics listed below, learn advanced Internet email concepts and receive an overview of how to customize configurations.

starstarstarstarstar_half

* Actual course outline may vary depending on offering center. Contact your sales representative for more information.

Learning Objectives

After taking this course, you should be able to:
- Describe and administer the Cisco Email Security Appliance (ESA)
- Control sender and recipient domains
- Control spam with Talos SenderBase and anti-spam
- Use anti-virus and outbreak filters
- Use mail policies
- Use content filters
- Use message filters to enforce email policies
- Prevent data loss
- Perform LDAP queries
- Authenticate Simple Mail Transfer Protocol (SMTP) sessions
- Authenticate email
- Encrypt email
- Use system quarantines and delivery methods
- Perform centralized management using clusters
- Test and troubleshoot

1

  • Describing the Cisco Email Security Appliance

  • Cisco Email Security Appliance Overview
    Technology Use Case
    Cisco Email Security Appliance Data Sheet
    SMTP Overview
    Email Pipeline Overview
    Installation Scenarios
    Initial Cisco Email Security Appliance Configuration
    Centralizing Services on a Cisco
2

  • Administering the Cisco Email Security Appliance

  • Distributing Administrative Tasks
    System Administration Managing and Monitoring Using the Command Line Interface (CLI)
    Other Tasks in the GUI
    Advanced Network Configuration
    Using Email Security Monitor
    Tracking Messages
    Logging
3

  • Controlling Sender and Recipient Domains

  • Public and Private Listeners
    Configuring the Gateway to Receive Email
    Host Access Table Overview
    Recipient Access Table Overview
    Configuring Routing and Delivery Features
4

  • Controlling Spam with Talos SenderBase and Anti-Spam

  • SenderBase Overview
    Anti-Spam
    Managing Graymail
    Protecting Against Malicious or Undesirable URLs
    File Reputation Filtering and File Analysis
    Bounce Verification
5

  • Using Anti-Virus and Outbreak Filters

  • Anti-Virus Scanning Overview
    Sophos Anti-Virus Filtering McAfee Anti-Virus Filtering
    Configuring the Appliance to Scan for Viruses
    Outbreak Filters
    How the Outbreak Filters Feature Works Managing Outbreak Filters
6

  • Using Mail Policies

  • Email Security Manager Overview
    Mail Policies Overview
    Handling Incoming and Outgoing Messages Differently
    Matching Users to a Mail Policy Message Splintering
    Configuring Mail Policies
7

  • Using Content Filters

  • Content Filters Overview
    Content Filter Conditions
    Content Filter Actions
    Filter Messages Based on Content
    Text Resources Overview
    Using and Testing the Content Dictionaries Filter Rules
    Understanding Text Resources
    Text Resource Management
    Using Text Resources
8

  • Using Message Filters to Enforce Email Policies

  • Message Filters Overview
    Components of a Message Filter
    Message Filter Processing
    Message Filter Rules
    Message Filter Actions
    Attachment Scanning
    Examples of Attachment Scanning Message Filters
    Using the CLI to Manage Message Filters
    Message Filter Examples
    Configuring Scan Behavior
9

  • Preventing Data Loss

  • Overview of the Data Loss Prevention (DLP) Scanning Process
    Setting Up Data Loss Prevention
    Policies for Data Loss Prevention
    Message Actions
    Updating the DLP Engine and Content Matching Classifiers
10

  • Using LDAP

  • Overview of LDAP
    Working with LDAP
    Using LDAP Queries
    Authenticating End-Users of the Spam Quarantine
    Configuring External LDAP Authentication for Users
    Testing Servers and Queries
    Using LDAP for Directory Harvest Attack Prevention
    Spam Quarantine Alias Consolidation Queries
    Validating Recipients Using an SMTP Server
11

  • SMTP Session Authentication

  • Configuring AsyncOS for SMTP Authentication
    Authenticating SMTP Sessions Using Client Certificates
    Checking the Validity of a Client Certificate
    Authenticating User Using LDAP Directory
    Authenticating SMTP Connection Over Transport Layer Security (TLS) Using a Client Certificate
    Establishing a TLS Connection from the Appliance
    Updating a List of Revoked Certificates
12

  • Email Authentication

  • Email Authentication Overview
    Configuring DomainKeys and DomainKeys Identified Mail (DKIM) Signing
    Verifying Incoming Messages Using DKIM
    Overview of Sender Policy Framework (SPF) and SIDF Veri?cation
    Domain-based Message Authentication Reporting and Conformance (DMARC) Verification
    Forged Email Detection
13

  • Email Encryption

  • Overview of Cisco Email Encryption
    Encrypting Messages
    Determining Which Messages to Encrypt
    Inserting Encryption Headers into Messages
    Encrypting Communication with Other Message Transfer Agents (MTAs)
    Working with Certificates
    Managing Lists of Certificate Authorities
    Enabling TLS on a Listener’s Host Access Table (HAT)
    Enabling TLS and Certi?cate Verification on Delivery
    Secure/Multipurpose Internet Mail Extensions (S/MIME) Security Services
14

  • Using System Quarantines and Delivery Methods

  • Describing Quarantines
    Spam Quarantine
    Setting Up the Centralized Spam Quarantine
    Using Safelists and Blocklists to Control Email Delivery Based on Sender
    Configuring Spam Management Features for End Users
    Managing Messages in the Spam Quarantine
    Policy, Virus, and Outbreak Quarantines
    Managing Policy, Virus, and Outbreak Quarantines
    Working with Messages in Policy, Virus, or Outbreak Quarantines
    Delivery Methods
15

  • Centralized Management Using Clusters

  • Overview of Centralized Management Using Clusters
    Cluster Organization
    Creating and Joining a Cluster
    Managing Clusters
    Cluster Communication
    Loading a Configuration in Clustered Appliances
    Best Practices
16

  • Testing and Troubleshooting

  • Debugging Mail Flow Using Test Messages: Trace
    Using the Listener to Test the Appliance
    Troubleshooting the Network
    Troubleshooting the Listener
    Troubleshooting Email Delivery
    Troubleshooting Performance
    Web Interface Appearance and Rendering Issues
    Responding to Alerts
    Troubleshooting Hardware Issues
    Working with Technical Support
17

  • References

  • Model Specifications for Large Enterprises
    Model Specifications for Midsize Enterprises and Small-to-Midsize Enterprises or Branch O?ces
    Cisco Email Security Appliance Model Specifications for Virtual Appliances

Audience

This course is ideal for Security engineers, Security administrators, Security architects, Operations engineers, Network engineers, Network administrators, Network or security technicians, Network managers, System designers, and Cisco integrators and partners.

Language

English

Prerequisites

To fully benefit from this course, you should have one or more of the following basic technical competencies: - Cisco certification (Cisco CCENT certification or higher) - Relevant industry certification, such as (ISC)2, CompTIA Security+, EC-Council, Global Information Assurance Certification (GIAC), and ISACA - Cisco Networking Academy letter of completion (CCNA 1 and CCNA 2) - Windows expertise: Microsoft [Microsoft Specialist, Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Systems Engineer (MCSE)], CompTIA (A+, Network+, Server+)

$3,600

Length: 4.0 days (32 hours)

Level:

Not Your Location? Change

Course Schedule:

To request a custom delivery, please chat with an expert.

Loading...