Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

How to configure SMTPS relay server for outgoing email in Ironport

Hi, Can I configure Ironport C170 to relay all our outgoing email through an ISP  mail server which accepts connection on SMTPS with authentication as currently we have this configuration in our environment.

Also, can I test it once configured without making it live?



Everyone's tags (1)

I pulled this from the online

I pulled this from the online help:



Outgoing SMTP Authentication

SMTP Authentication can also be used to provide validation for an outbound mail relay, using a username and password. Create an ‘outgoing’ SMTP authentication profile and then attach the profile to an SMTP route for the ALL domain. On each mail delivery attempt, the Cisco appliance will log on to the upstream mail relay with the necessary credentials. Only a PLAIN SASL formatted login is supported.



  1. Choose Network > SMTP Authentication.
  2. Click Add Profile.
  3. Enter a unique name for the SMTP authentication profile.
  4. For the Profile Type, select Outgoing.
  5. Click Next.
  6. Enter an authentication username and password for the authentication profile.
  7. Click Finish.
  8. Choose Network > SMTP Routes.
  9. Click the All Other Domains link in the Receiving Domain column of the table.
  10. Enter the name of the Destination Host for the SMTP route. This is the hostname of your external mail relay used to deliver outgoing mail.
  11. Select the outgoing SMTP authentication profile from the drop-down menu.
  12. Submit and commit your changes.

Hi,I have a similar question


I have a similar question with one difference. I setup a sender based routing in Outgoing Mail Policies, which works fine.
This alternate mailhost will require smtp auth in future and my question is how to achieve this.
I would guess to create an outgoing smtp auth profile and a smtp route. But I'm not sure what to put in the receiving domain field. The sender domain or IP of the alternate mailhost, or...?

Thanks in advance,


Hey Pascal,This is a spot

Hey Pascal,

This is a spot where I"m not quite sure...

It may just be a matter of setting a destination that requires TLS under Mail Policies/Destination Controls.



New Member

Hi Kstieers,ISP requires

Hi Kstieers,

ISP requires below settings for outbound relay.


Configure your existing SMTP settings (in your email program) to:

  • use authentication:
    enter your Internode username and password
    Do not include with your username.
    note: your password is cAsE-SensitivE.
  • enable SSL for sending email (SMTPS).


Where can we enable SSL for sending email (SMTPS)?

I can't seems to find this option neither in SMTP Authentication (Outgoing) nor in SMTP routes.



Try Mail Policies/Destination

Try Mail Policies/Destination Controls.

That's where you set TLS config...

But I'm not sure if it will do what you need, you may want to open a TAC case...



New Member

Hi,I have tried setting TLS


I have tried setting TLS config in Destination Controls but I don't think its working.

I will try to explore a little further otherwise I may have to open a TAC case.


Thanks for help Kstieers.

New Member

Cisco ESA does not support

Cisco ESA does not support SMTPS.

Got a response back from TAC,

......I’m sorry, but SMTPS is not supported by the Email Security Appliance. We support only STARTTLS and SMTP AUTH as part of the ESMTP protocol. The SMTPS protocol has been depreciated in the late 1990s with the introduction of STARTTLS and the IANA has reassigned the SMTPS port 465 for other purposes. The SMTPS protocol is only in use nowadays for backwards compatibility for mail servers that do not support ESMTP......


I have contacted our ISP for the alternative.indecision