Cisco Secure Email Virtual Gateway

Security Notices

Field Notices

• Field Notice: FN72230 - Virtual Email Security Appliance/Security Management Appliance Upgrade Fails Due to Small Nextroot Partition Size - Workaround Provided 06-Nov-2023
• Field Notice: FN - 72557 - Cisco Secure Email Gateway: Update Needed to Certificate Authority Trust Store to Avoid Failure of Cisco Aggregator Service - Software Upgrade Recommended 11-Apr-2023
• Field Notice: FN - 72502 - Secure Web, Secure Management, and Secure Email Virtual Appliances Might Not Receive Updates After January 13, 2023 - Configuration Change Recommended 14-Nov-2022
• Field Notice: FN - 72389 - Cisco Secure Email Gateway: Talos Domain Age Update - Configuration Change Recommended 03-May-2022
• Field Notice: FN - 72113 - ESA/WSA: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing and Other Functionality - Software Upgrade Recommended 17-Mar-2022
• Field Notice: FN - 72106 - Email Security Appliance: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing and Other Functionality - Software Upgrade Recommended 17-Mar-2022
• Field Notice: FN - 72181 - ESA/WSA - TLS 1.0 and 1.1 Deprecation Affects Connectivity with AMP Cloud - Software Upgrade Recommended 22-Feb-2022
• Field Notice: FN - 70571 - WSA/ESA - TLS 1.0 and 1.1 Deprecation Affects Reporting to Cisco Threat Grid - Software Upgrade Recommended 10-Nov-2021
• Field Notice: FN - 72210 - Email Security Appliance Talos Intelligence Connection Update - Software Upgrade Recommended 21-Sep-2021
• Field Notice: FN - 70490 - Virtual ESA/WSA/SMA Updates and Upgrades Will Fail After Smart License Migration if the XML File Expires - Workaround Provided 13-Jan-2020
• Field Notice: FN - 64277 - WSA/ESA - Update Necessary for Support of New McAfee 5800 Engine on Cisco Web and Email Security Appliances - Software Upgrade Recommended 19-Jun-2018
• Field Notice: FN - 64177 - Change in IP Addresses Used for Static Updates by Email and Web Security Appliances and Content Security Management Appliance - Workaround Provided 19-Oct-2017
• Field Notice: FN - 64111 - Cisco Email Security Appliance (ESA) - Change in URL Reputation Feature Servers Requires Configuration Change in Order to Avoid Work Queue Backups - Configuration Change Recommended 18-Oct-2017
• Field Notice: FN - 64023 - Cisco Email Security Appliances - Change in Suspect Range of URL Web Based Reputation Score Used by URL Reputation Feature - Workaround Provided 09-Oct-2017

Security Advisories, Responses and Notices

• Cisco Email Security Appliance Memory Corruption Denial of Service Vulnerability 09-Jan-2019
• Cisco Virtual WSA, ESA, and SMA Default SSH Host Keys Vulnerability 02-Oct-2015
• Multiple Default SSH Keys Vulnerabilities in Cisco Virtual WSA, ESA, and SMA 25-Jun-2015

Install and Upgrade

Install and Upgrade TechNotes

• Why is TLS version 1.0 disabled after AsyncOS upgrade 15-Jun-2023

Configuration

Configuration Examples and TechNotes

• Migrate a Configuration from an HW Model (Cx90) to a Nutanix 16-Oct-2024
• Configure Sender Domain Exception List for Secure Email Gateway 23-Apr-2024
• Manual Log Deletion for Cisco Secure Email Gateway 24-Aug-2023
• Integrate OKTA with ESA for SAML Authentication 28-Apr-2023
• Configure Content Filter to Monitor SPF and DKIM Verification 03-Apr-2023
• How to allow simulated phishing platform campaigns through the Cisco Email Security Appliance 22-Dec-2021
• How to Apply the Workaround for Cisco vESA/vSMA Failing Upgrade Due to Small Partition Size 28-Jun-2021
• Configure Cisco Email Security and Security Management for Staging Updates 22-Apr-2020
• Cisco RES: Account Provisioning for Virtual, Hosted, and Hardware ESA Configuration Example 12-Sep-2019
• Administrative details on 'trailblazer' CLI command for Cisco Security Management Appliance (SMA) 08-May-2019
• Cisco Email Security Plug-In Installation Using Custom Configuration Files 16-Apr-2018

Maintain and Operate

Maintain and Operate TechNotes

• Export and Import ESA HAT to Add Multiple Entries 04-Apr-2023

Troubleshooting

Support FAQ

• Locate the Serial Number of My Content Security Appliance 10-Feb-2023
• Shut Down an Email Security Appliance (ESA) 06-May-2022
• ESA/SMA Virtual Deployment FAQ 01-May-2020
• How can I lock a user account in my domain in CRES? 04-Dec-2017
• ESA FAQ: What is a listener? 07-Mar-2016
• ESA FAQ: What is a Message ID (MID), Injection Connection ID (ICID), or Delivery Connection ID (DCID)? 12-Aug-2014
• ESA FAQ: Do I still need desktop anti-virus if I enable Sophos or McAfee Anti-Virus on my ESA? 29-Jul-2014
• ESA FAQ: How do I force a download of Sophos or McAfee Anti-Virus updates immediately? 24-Jul-2014

Troubleshooting TechNotes

• Upgrade Email Security Appliance (ESA) with GUI or CLI 21-Aug-2024
• Enable Domain Mapping Feature to Redirect Emails 04-Jun-2024
• Troubleshoot Alert Message - System Is Rate Limiting Envelope Sender 04-Jun-2024
• Create Certificates Setup Guide for TLS on ESA 29-Mar-2024
• Troubleshoot Virtual SEG Error Manifest Server Error 13-Feb-2024
• Invalid URL 'https:///v1/clouds': No host supplied after upgrade Secure Email Gateway to 15 release 23-Aug-2023
• Introduce Password Protected File Analysis (PPFA) 13-Jul-2023
• Troubleshoot External Threat Feeds Top Reasons for Failure 25-Apr-2023
• Download Logs from the GUI of Your CES ESA and CMD 21-Feb-2023
• Identify Best Practices for vESA, vWSA, or vSMA Virtual Licenses 14-Feb-2023
• Understand Smart Licensing Overview and Best Practices for Email and Web Security 10-Feb-2023
• Use a Return Material Authorization 06-Feb-2023
• Use API to Add Senders in SL/BL on SMA 28-Oct-2022
• Search and View SAML Authentications in the Email Security Appliance 27-Oct-2022
• ESA Understanding SLBL evaluation of email addresses 05-May-2021