27.11.2012 Views

IronPort - Configuration Guide - AsyncOS 7.6.1

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Chapter 9 Anti-Spam<br />

Additional Steps<br />

OL-25136-01<br />

The Security Services > <strong>IronPort</strong> Intelligent Multi-Scan page is refreshed to display the values you chose<br />

in the previous steps.<br />

Figure 9-8 Cisco <strong>IronPort</strong> Intelligent Multi-Scan Global Settings<br />

Once you have enabled Cisco <strong>IronPort</strong> Intelligent Multi-Scan, enable SenderBase Reputation Service<br />

scoring, even if you are not rejecting connections based on SenderBase Reputation scores. For more<br />

information on enabling SBRS, see Implementing SenderBase Reputation Filters, page 7-4.<br />

Configuring Anti-Spam Rule Updating<br />

Cisco <strong>IronPort</strong> Anti-Spam and Cisco <strong>IronPort</strong> Intelligent Multi-Scan rules are retrieved (by default) from<br />

Cisco <strong>IronPort</strong>’s update servers. You can specify a local server for updates, a proxy server to use for<br />

retrieving updates, and whether and how frequently to check for rule updates. To configure updates for<br />

your anti-spam solution, click Edit Update Settings on the Security Services > Service Updates page.<br />

See Service Updates, page 15-10 for more information.<br />

Enabling a Proxy Server for Obtaining Cisco <strong>IronPort</strong> Anti-Spam Rules Updates<br />

The Cisco <strong>IronPort</strong> appliance is configured to connect directly to Cisco <strong>IronPort</strong>’s update servers to<br />

receive anti-spam rules updates. This connection is made by HTTP on port 80 and the content is<br />

encrypted. If you do not want to open this port in your firewall, you can define a proxy server and specific<br />

port from which the appliance can receive updated rules.<br />

If you choose to use a proxy server, you can specify an optional authentication and port.<br />

Cisco <strong>IronPort</strong> Anti-Spam and Cisco <strong>IronPort</strong> Intelligent Multi-Scan will automatically use a proxy<br />

server if one has been defined. There is no way to turn off the proxy server for the anti-spam solution<br />

without disabling it for all other service updates (Outbreak Filters, Sophos Anti-Virus, etc.).<br />

Note If you define a proxy server, it will be used for all service updates that are configured to use a proxy<br />

server, automatically.<br />

For more information about defining a proxy server, see Specify an HTTP Proxy Server (Optional),<br />

page 15-14.<br />

Cisco <strong>IronPort</strong> <strong>AsyncOS</strong> 7.6 for Email <strong>Configuration</strong> <strong>Guide</strong><br />

9-11

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!