IronPort - advanced configuration guide

Chapter 3 LDAP Queries
Sample Active Directory Alias Consolidation Settings
OL-25137-01
This section shows sample settings for an Active Directory server and the alias consolidation query. This
example uses anonymous authentication for the Active Directory server, a query string for alias
consolidation for Active Directory servers, and the mail email attribute.
Table 3-13 Example LDAP Server and Spam Quarantine Alias Consolidation Settings: Active
Directory
Authentication Method Anonymous
Server Type Active Directory
Port 3268
Base DN [Blank]
Connection Protocol Use SSL
Query String (|(mail={a})(mail=smtp:{a}))
Email Attribute mail
Sample OpenLDAP Alias Consolidation Settings
This section shows sample settings for an OpenLDAP server and the alias consolidation query. This
example uses anonymous authentication for the OpenLDAP server, a query string for alias consolidation
for OpenLDAP servers, and the mail email attribute.
Table 3-14 Example LDAP Server and Spam Quarantine Alias Consolidation Settings: OpenLDAP
Authentication Method Anonymous
Server Type OpenLDAP
Port 389
Base DN [Blank] (Some older schemas will want to use a specific
Base DN.)
Connection Protocol Use SSL
Query String (mail={a})
Email Attribute mail
the Email Security appliance must include the complete distinguished names for the message senders
when it sends DLP incident data to Enterprise Manager. To acquire the sender name for Enterprise
Manager, create a user distinguished name query for your LDAP server and add the query to the listeners
that send outgoing messages on your Email Security appliance. The Email Security appliance only uses
this query when RSA Enterprise Manager is enabled for DLP. Otherwise, it does not appear as an option
for the server profile.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
3-45