IronPort - advanced configuration guide

OL-25137-01
Configuring Global Settings 3-7
Example of Creating an LDAP Server Profile 3-7
Enabling LDAP Queries on a Public Listener 3-8
Enabling LDAP Queries on a Private Listener 3-9
Enhanced Support for Microsoft Exchange 5.5 3-9
Working with LDAP Queries 3-12
Types of LDAP Queries 3-12
Base Distinguishing Name (DN) 3-12
LDAP Query Syntax 3-13
Secure LDAP (SSL) 3-13
Routing Queries 3-14
Anonymous Queries 3-14
Notes for Active Directory Implementations 3-16
Testing LDAP Queries 3-17
Troubleshooting Connections to LDAP Servers 3-18
Acceptance (Recipient Validation) Queries 3-18
Sample Acceptance Queries 3-19
Configuring Acceptance Queries for Lotus Notes 3-19
Routing: Alias Expansion 3-20
Sample Routing Queries 3-20
Masquerading 3-20
Sample Masquerading Queries 3-21
Masquerading “Friendly Names” 3-21
Group LDAP Queries 3-22
Sample Group Queries 3-22
Configuring a Group Query 3-22
Example: Using a Group Query to Skip Spam and Virus Checking 3-25
Domain-based Queries 3-26
Creating a Domain-Based Query 3-26
Chain Queries 3-27
Creating a Chain Query 3-28
Using LDAP For Directory Harvest Attack Prevention 3-28
Directory Harvest Attack Prevention within the SMTP Conversation 3-29
Directory Harvest Attack Prevention within the Work Queue 3-30
Configuring Directory Harvest Prevention in the Work Queue 3-30
Configuring AsyncOS for SMTP Authentication 3-31
Configuring SMTP Authentication 3-32
Specifying a Password as Attribute 3-32
Configuring an SMTP Authentication Query 3-33
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Contents
vii