Securing Email with Cisco Email Security Appliance (SESA)

Course Objectives:

• Describe, configure, and administer the Cisco Secure Email Gateway.

• Control sender and recipient domains, spam, and malware using Talos SenderBase, anti-virus, and outbreak filters.

• Implement mail, content, and message filters.

• Prevent data loss and enforce email security policies.

• Perform LDAP queries, SMTP session authentication, and email encryption.

• Use system quarantines and delivery methods.

• Perform centralized management using clusters.

• Test and troubleshoot Cisco ESA configurations and security policies.

Course Outline:

• Cisco Email Security Appliance overview

• Controlling sender and recipient domains

• Controlling spam with Talos SenderBase and anti-spam filters

• Anti-virus and outbreak filtering

• Mail, content, and message policies

• Data loss prevention

• LDAP queries and integration

• SMTP session authentication, email authentication, and encryption

• Administering ESA, quarantines, and delivery methods

• Centralized management and cluster administration

• Testing and troubleshooting

Lab Exercises Include:

• • Verify and test Cisco ESA configuration

  • Detect and mitigate advanced malware in attachments (macro detection)

  • Protect against malicious or undesirable URLs in shortened links or inside attachments

  • Handle unscannable messages intelligently

  • Leverage AMP Cloud Intelligence via pre-classification enhancement

  • Integrate Cisco ESA with AMP Console

  • Prevent threats using anti-virus protection

  • Apply outbreak filters

  • Configure attachment scanning

  • Configure outbound Data Loss Prevention (DLP)

  • Integrate ESA with LDAP and enable LDAP accept queries

  • Configure DomainKeys Identified Mail (DKIM)

  • Implement Sender Policy Framework (SPF)

  • Detect forged emails

  • Perform basic ESA administration

  • Configure Cisco Secure Email and Web Manager for tracking and reporting