IronPort - advanced configuration guide

5-18
Figure 5-13 Add DKIM Verification Profiles Page
Step 3 Enter the name of the profile.
Step 4 Select the minimum key size you want the appliance to accept for signing keys.
Step 5 Select the maximum key size you want the appliance to accept for signing keys.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 5 Email Authentication
Step 6 Select the maximum number of signatures to verify in a single message. The default is five signatures.
Step 7 Select the number of seconds before the key query times out. The default is 10 seconds.
Step 8 Select maximum allowed difference in time (in seconds) between the sender’s system time and verifier’s.
The default is 60 seconds.
Step 9 Select whether to use the body-length parameter in the signature to verify the message.
Step 10 Select whether the Email Security appliance accepts or rejects the message if there is a temporary failure
when verifying its signature. If you want the appliance to reject the message, you can choose to have it
send the default 451 SMTP response code or another SMTP response code and text.
Step 11 Select whether the Email Security appliance accepts or rejects the message if there is a permanent failure
when verifying its signature. If you want the appliance to reject the message, you can choose to have it
send the default 451 SMTP response code or another SMTP response code and text.
Step 12 Submit your changes.
The new profile appears in the DKIM Verification Profiles table.
Step 13 Commit your changes.
Step 14 At this point you should enable DKIM verification on an incoming mail flow policy and select the
verification profile you want to use.
OL-25137-01