Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Fixup protocol smtp 25

The Exchange Mail servers run ESMTP.

The only way the PIX Firewall allows ESMTP is to disable the fixup protocol smtp 25.

Does this not create security expsoures on the firewall for SMTP.

Is there a way to customize mailguard to protect SMTP and still allow ESMTP through.

regds

Johnny

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Fixup protocol smtp 25

It is a free upgrade if you have a smartnet contract on your PIX. A Smartnet contract entitles you to free software upgrades on the convered hardware. Hope this helps explain matters.

Scott

5 REPLIES
Gold

Re: Fixup protocol smtp 25

Johnny

Yes you are correct, by disabling the SMTP fixup protocol you are creating a SMTP security problem. I don't believe there is a way of customizing mailguard to protect SMTP and still allow ESMTP.

You can only have one or the other, i.e. fixup protocol SMTP 25 OR no fixup protocol SMTP 25. The PIX is doing its job correctly and if you are running ESMTP then I would suggest that you fine tune you ESMTP server and not the PIX! I am not a Microsoft guy so will not be able to advise on fine tuning an ESMTP server but there are lots of information on this on the web just try Google, i.e. search for PIX ESMTP problems.

Hope this helps a little.

Jay

Re: Fixup protocol smtp 25

As an FYI, the feature requests have been heard and we are finally adding an ESMTP inspection engine to PIX 7.0 code which is due out towards the end of the year.

Scott

New Member

Re: Fixup protocol smtp 25

Hi Scott,

Thanks for the info.

I'm assuming there will be a charge to upgrade from 6.3 to 7.0 or would this be a free upgrade.

regds

Johnny

Re: Fixup protocol smtp 25

It is a free upgrade if you have a smartnet contract on your PIX. A Smartnet contract entitles you to free software upgrades on the convered hardware. Hope this helps explain matters.

Scott

New Member

Re: Fixup protocol smtp 25

Hi Scott,

Yes it does thanks for the info.

regds

Johnny

745
Views
3
Helpful
5
Replies