Search and Remediate Messages in the Mailboxes

You can now configure your appliance to remediate the messages manually using the Search and Remediate feature. This feature provides the capability to search for the messages using the Message Tracking filter and apply remedial action on the messages. For more information, see Remediating Messages in Mailboxes.

Improving User Experience of Cisco Email Security Gateway using Cisco Success Network

You can use the Cisco Success Network (CSN) feature to send your appliance and feature usage details to Cisco. These details are used by Cisco to identify the appliance version and the features activated but not enabled on your appliance.

The ability to send your appliance and feature usage details to Cisco helps an organization to:

• Improve the effectiveness of the product in user networks by performing analytics on collected telemetry data and suggesting users with recommendations using a digital campaign.

• Improve user experience with Cisco Email Security gateway.

For more information, see Integrating with Cisco Threat Response.

New Cisco Talos Email Status Portal

The Cisco Talos Email Status Portal replaces the legacy Cisco Email Submission and Tracking Portal.

The Cisco Talos Email Status Portal is a web-based tool for monitoring the status of email submissions from Cisco users.

Accessing New Web Interface of Appliance in Dusk Mode

Dusk Mode is a reversed color scheme that utilizes light-colored typography, UI elements, and iconography on dark backgrounds.

You can now access the new web interface of your appliance using the dusk mode.

For more information, see Setup and Installation.

Ability to connect appliance to Cisco Threat Response using proxy server

You can now connect your appliance to Cisco Threat Response using a proxy server.

For more information, see,System Administration.

Integrating the Cisco Email Security Gateway with Cisco Advanced Phishing Protection cloud service

The Cisco Advanced Phishing Protection engine on the Cisco Email Security Gateway checks the unique behavior of all legitimate senders, based on the historic email traffic sent to your organization. The cloud service interface of Cisco Advanced Phishing Protection provides risk analysis to distinguish good messages from potentially malicious messages.

The Cisco Advanced Phishing Protection cloud service relies on the email gateway as a sensor engine to receive a copy of the message metadata sent inbound into your organization. This sensor engine collects metadata such as message headers from the email gateway and relays them to the Cisco Advanced Phishing Protection cloud service for analysis. After the analysis, potentially malicious messages are remediated from the recipient mailbox automatically based on the pre-configured policies on the Cisco Advanced Phishing Protection cloud service.

The ability to use the Cisco Email Security Gateway as a sensor engine helps an organization to:

• Identify, investigate, and remediate threats, observed on the message headers from the recipient mailbox.

• View the reporting data of the metadata of the message from multiple email gateways in your organization.

• Send real-time alerts to the end-users about malicious messages.

For more information, see Integrating the Email Gateway with Cisco Advanced Phishing Protection.

Improve Phishing Detection Efficacy using Service Logs

The Service Logs is sent to the Cisco Talos Cloud service to improve Phishing detection.

For more information, see Improving Phishing Detection Efficacy using Service Logs.

Improved Phishing Efficacy

The Cisco Email Security appliance now provides an improved IP Reputation and URL Reputation services for faster and better Phishing catch rates.

Landing Page

Reports Drop-down

My Reports Page

Mail Flow Summary Page

The Mail Flow Summary page includes trend graphs and summary tables for incoming and outgoing messages.

The Incoming Mail includes graphs and summary tables for the incoming and outgoing messages.

Advanced Malware Protection Report Pages

The following sections are available on the Advanced Malware Protection report page of the Reports menu:

• Summary

• AMP File Reputation

• File Analysis

• File Retrospection

• Mailbox Auto Remediation

The appliance has the following Advanced Malware Protection report pages under Montior menu:

• Advanced Malware Protection

• AMP File Analysis

• AMP Verdict Updates

• Mailbox Auto Remediation

Outbreak Filters Page

The Past Year Virus Outbreaks and Past Year Virus Outbreak Summary are not available in the Outbreak Filtering report page of the new web interface.

The Monitor > Outbreak Filters page displays the Past Year Virus Outbreaks and Past Year Virus Outbreak Summary.

Spam Quarantines (Administrative and End Users)

Click Quarantine > Spam Quarantine > Search in the new web interface.

The end users can access the spam quarantine using the URL:

https://example.com:<https-api-port>/euq-login

where example.com is the appliance hostname and <https-api-port> is the AsyncOS API HTTPS port opened on the firewall.

You can view spam quarantine from the Monitor > Spam Quarantine menu.

Policy, Virus and Outbreak Quarantines

Click Quarantine > Other Quarantine in the new web interface.

You can only view Policy, Virus and Outbreak Quarantines in the new web interface.

You can view, configure and modify the Policy, Virus and Outbreak Quarantines on the appliance using the Monitor > Policy, Virus and Outbreak Quarantines.

Select All Action for Messages in Quarantine

You can select multiple (or all) messages and perform a message action such as delete, delay, release, move, etc.

You cannot select multiple messages to perform a message action.

Maximum Download Limit for Attachments

The maximum limit for downloading attachments of a quarantined message is restricted to 25 MB.

-

Rejected Connections

To search for rejected connections, click Tracking > Search > Rejected Connection tab on the .

-

Query Settings

The Query Settings field of the Message Tracking feature is not available on the .

You can set the query timeout in the Query Settings field of the Message Tracking feature.

Message Tracking Data Availability

Click the gear icon on the upper right side of the page the web interface to access Message Tracking Data Availability page.

You can view the missing-data intervals for your appliance .

Show Additional Details of Messages

You can view additional details of a message such as Verdict Charts, Last State, Sender Groups, Sender IP, IP Reputation Score and Policy Match details.

-

Verdict Charts and Last State Verdicts

Verdict Chart displays information of the various possible verdicts triggered by each engine in your appliance .

Last State of the message determines the final verdict triggered after all the possible verdicts of the engine.

Verdict Charts and Last State Verdicts of the messages are not available.

Message Attachments and Host Names in Message Details

Message attachments and host names are not displayed in the Message Details section of the message on the appliance.

Message attachments and host names are displayed in the Message Details section of the message.

Sender Groups, Sender IP, IP Reputation Score and Policy Match in Message Details

Sender Groups, Sender IP, IP Reputation Score, and Policy Match details of the message is displayed in the Message Details section, on the appliance.

Sender Groups, Sender IP, IP Reputation Score, and Policy Match of the message is not available in the Message Details section of the message.

Direction of the Message (Incoming or Outgoing)

Direction of the message (incoming or outgoing) is displayed in the message tracking results page, on the appliance.

Direction of the message (incoming or outgoing) is not displayed in the message tracking results page.