This document describes an identified outbound mail issue for Cisco Secure Email Cloud Gateway customers that involved IP addresses listed by UCEPROTECT, a Remote Block List provider.
On June 16, 2022, Cisco Secure Email Cloud Gateway customers reported an increase in outbound messages held in delivery queues, along with rejected or bounced messages. After gathering information and troubleshooting, Cisco identified IP addresses within a Cisco-assigned autonomous system number (ASN) that UCEPROTECT had listed. UCEPROTECT provides Remote Block List (RBL) services.
Partners, email administrators, and customers sometimes use UCEPROTECT information as a source for their blocklisting. In these cases, individual recipients that rely on a UCEPROTECT-based blocklist can reject messages. However, a UCEPROTECT listing has not been observed to cause broad business impact or general email flow issues.
In order to delist from an RBL, UCEPROTECT requires a payment to the organization, unlike other reputable RBL services. Cisco does not recommend that you pay in order to delist, and Cisco does not provide payment if such a listing occurs in the future. Cisco takes this position because UCEPROTECT uses very strict listing policies.
Cisco recommends that its customers do not use the UCEPROTECT blocklist, and advises them to ask their email recipients and partners to do the same.
For all support-related concerns, contact the Cisco TAC or open a support case online.
Cisco Secure portfolio naming architecture
Cisco Technical Support & Downloads
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
23-Jun-2022
|
Initial Release |