E-mail logging over SSL on ASA?

[Matthew Harris]

Hi There,

Is there a way to do e-mail logging using SSL/TLS on a Cisco ASA? SMTP seems straight forward, however, I can't do SMTP (Port 25 TCP) outbound as my ISP has it blocked.

Thanks in advance!

Matt

[donnylee]

Matt,

Depending on your context.

Are you still using ESA as your mail proxy?

With ESA, as far as I know, enabling ESMTP on ASA will cause issue on TLS traffic.

Thanks,

-donny

[Matthew Harris]

Hi Donny,

I am not using an ESA, I cannot seem to find any Cisco documentation on how to configure e-mail logging on an ASA using SSL/TLS.  Does this documentaion exist? I am not having inspect issues, my pcaps show no 465/587 TCP traffic leaving my outside interface when a logging event occurs.  When I configure e-mail logging using SMTP I see port 25 TCP traffic leaving, so I must not be configuring it correctly for SSL/TLS.

Thanks,

Matt

[donnylee]

Hi Matt,

I will move your discussion to the ASA/Firewalling section  since there will be more people with ASA skills to answer your query there.

Discussions in Email Security are normally around the Cisco ESA.

Thanks,

Donny