Securing Email with Cisco Email Security Appliance (SESA v3.1)
Price
$1,750.00 USD
Duration
4 Days | Mon – Fri, Daytime
8 Days | Mon – Thur, Evenings
Cisco Learning Credit (CLC) Eligible
Delivery Methods
Virtual Instructor Led
Private Group
Excellence
At DSDT, we recognize that every professional arriving at our program possesses unique aspirations that demand nothing less than excellent training. Our CAREER SKILLS+™ program is designed to not only meet but exceed your educational expectations, ensuring a robust path to career advancement.
Empowerment
Gain practical empowerment with hands-on training in the latest industry best practices, guided by seasoned experts. Our courses are structured to integrate seamlessly into your existing professional schedule, providing flexible yet comprehensive learning experiences.
Certification
Upon the successful completion of your coursework and real-world projects, DSDT will award you with a professional certificate, affirming your new skills and preparing you for further professional achievements.
Support
We provide round-the-clock support to all our participants, ensuring that every question is answered and every opportunity for excellence is seized. Our team is dedicated to your success in the program and beyond, helping you achieve outstanding results in your certification exams.
Securing Email with Cisco Email Security Appliance (SESA v3.1)
The Securing Email with Cisco Email Security Appliance (SESA) v3.1 course shows you how to deploy and use Cisco® Email Security Appliance to establish protection for your email systems against phishing, business email compromise, and ransomware, and to help streamline email security policy management. This hands-on course provides you with the knowledge and skills to implement, troubleshoot, and administer Cisco Email Security Appliance, including key capabilities such as advanced malware protection, spam blocking, anti-virus protection, outbreak filtering, encryption, quarantines, and data loss prevention.
Course Objectives
Describe and administer the Cisco Email Security Appliance (ESA)
Control sender and recipient domains
Control spam with Talos SenderBase and anti-spam
Use anti-virus and outbreak filters
Use mail policies
Use content filters
Use message filters to enforce email policies
Prevent data loss
Perform LDAP queries
Authenticate Simple Mail Transfer Protocol (SMTP) sessions
Authenticate email
Encrypt email
Use system quarantines and delivery methods
Perform centralized management using clusters
Test and troubleshoot
Who Should Attend?
Security engineers
Security administrators
Security architects
Operations engineers
Network engineers
Network administrators
Network or security technicians
Network managers
System designers
Cisco integrators and partners
Course Prerequisites
To fully benefit from this course, you should have the following knowledge and skills:
Cisco certification (Cisco CCENT® certification or higher)
Relevant industry certification, such as (ISC)2, CompTIA Security+, EC-Council, Global Information Assurance Certification (GIAC), and ISACA
Cisco Networking Academy letter of completion (CCNA® 1 and CCNA 2)
Windows expertise: Microsoft [Microsoft Specialist, Microsoft Certified Solutions Associate (MCSA), Microsoft Certified Systems Engineer (MCSE)], CompTIA (A+, Network+, Server+)
The knowledge and skills that a student must have before attending this course are:
TCP/IP services, including Domain Name System (DNS), Secure Shell (SSH), FTP, Simple Network Management Protocol (SNMP), HTTP, and HTTPS
Experience with IP routing
Enterprise and individual training is available for this program.
Key Features
Intensive Bootcamp
Our 5 or 10 day bootcamp offers rigorous, instructor-led training that can be attended online via Microsoft Teams or in person in various cities. These sessions are designed to fit seamlessly into your professional life, ensuring you receive comprehensive preparation without compromising your daily responsibilities.
Certification Preparedness
Complete this 5 or 10 day intensive program in preparation to test for the Securing Email with Cisco Email Security Appliance (SESA v3.1) certification. Each participant will also receive a completion certificate, affirming your enhanced skills and knowledgeable experience.
Interactive Classroom Engagement
Our virtual training includes live lectures, demonstrations and virtual labs that allow you to participate in discussions with your instructor and fellow classmates to get real-time feedback.
Flexible Learning Options
This 5 or 10 day program is available both in-person and via live online formats, offering flexible scheduling options to accommodate your busy calendar. Whether it's during the weekday or the weekend, we make it easy for you to engage and learn.
Expert Instructors
DSDT prides itself on partnering with certified subject matter experts who not only bring over 10 years of real-world experience to the table but also create dynamic, interactive learning environments. Our instructors are dedicated to your success and professional growth.
Continued Learning Resources:
Upon completion of the course, students gain access to extensive post-class materials. This support system is designed to help learners review concepts, catch up on missed sessions, or refine their skills, ensuring continuous professional development and mastery of new competencies.
Exclusive Corporate Training
DSDT offers bespoke group training sessions tailored to the specific needs of your organization. Conducted by our top-tier instructors, these private courses are aimed at fostering collective advancement and skill enhancement within your team, leveraging our strong connections to local industries and cutting-edge digital technology practices.
Guaranteed Course Availability
All scheduled sessions of our program are guaranteed to run as planned, whether in a classroom, live virtual, or in-house setting. We ensure that you can rely on us for your educational needs without disruption.
Customized Training Solutions
Reflecting DSDT’s commitment to addressing specific industry demands, our subject matter experts develop customized training programs that focus on the particular objectives of your team. This approach not only enhances targeted skill development but also integrates practical, real-world applications essential for success in today’s digital landscape.
Agenda
1 – Describing the Cisco Email Security Appliance
Cisco Email Security Appliance Overview
Technology Use Case
Cisco Email Security Appliance Data Sheet
SMTP Overview
Email Pipeline Overview
Installation Scenarios
Initial Cisco Email Security Appliance Configuration
Centralizing Services on a Cisco Content Security Management Appliance (SMA)
Release Notes for AsyncOS 11.x
2 – Administering the Cisco Email Security Appliance
Distributing Administrative Tasks
System Administration
Managing and Monitoring Using the Command Line Interface (CLI)
Other Tasks in the GUI
Advanced Network Configuration
Using Email Security Monitor
Tracking Messages
Logging
3 – Controlling Sender and Recipient Domains
Public and Private Listeners
Configuring the Gateway to Receive Email
Host Access Table Overview
Recipient Access Table Overview
Configuring Routing and Delivery Features
4 – Controlling Spam with Talos SenderBase and Anti-Spam
SenderBase Overview
Anti-Spam
Managing Graymail
Protecting Against Malicious or Undesirable URLs
File Reputation Filtering and File Analysis
Bounce Verification
5 – Using Anti-Virus and Outbreak Filters
Anti-Virus Scanning Overview
Sophos Anti-Virus Filtering
McAfee Anti-Virus Filtering
Configuring the Appliance to Scan for Viruses
Outbreak Filters
How the Outbreak Filters Feature Works
Managing Outbreak Filters
6 – Using Mail Policies
Email Security Manager Overview
Mail Policies Overview
Handling Incoming and Outgoing Messages Differently
Matching Users to a Mail Policy
Message Splintering
Configuring Mail Policies
7 – Using Content Filters
Content Filters Overview
Content Filter Conditions
Content Filter Actions
Filter Messages Based on Content
Text Resources Overview
Using and Testing the Content Dictionaries Filter Rules
Understanding Text Resources
Text Resource Management
Using Text Resources
8 – Using Message Filters to Enforce Email Policies
Message Filters Overview
Components of a Message Filter
Message Filter Processing
Message Filter Rules
Message Filter Actions
Attachment Scanning
Examples of Attachment Scanning Message Filters
Using the CLI to Manage Message Filters
Message Filter Examples
Configuring Scan Behavior
9 – Preventing Data Loss
Overview of the Data Loss Prevention (DLP) Scanning Process
Setting Up Data Loss Prevention
Policies for Data Loss Prevention
Message Actions
Updating the DLP Engine and Content Matching Classifiers
10 – Using LDAP
Overview of LDAP
Working with LDAP
Using LDAP Queries
Authenticating End-Users of the Spam Quarantine
Configuring External LDAP Authentication for Users
Testing Servers and Queries
Using LDAP for Directory Harvest Attack Prevention
Spam Quarantine Alias Consolidation Queries
Validating Recipients Using an SMTP Server
11 – SMTP Session Authentication
Configuring AsyncOS for SMTP Authentication
Authenticating SMTP Sessions Using Client Certificates
Checking the Validity of a Client Certificate
Authenticating User Using LDAP Directory
Authenticating SMTP Connection Over Transport Layer Security (TLS) Using a Client Certificate
Establishing a TLS Connection from the Appliance
Updating a List of Revoked Certificates
12 – Email Authentication
Email Authentication Overview
Configuring DomainKeys and DomainKeys Identified MailDKIM) Signing
Verifying Incoming Messages Using DKIM
Overview of Sender Policy FrameworkSPF) and SIDF Verification
Domain-based Message Authentication Reporting and Conformance (DMARC) Verification
Forged Email Detection
13 – Email Encryption
Overview of Cisco Email Encryption
Encrypting Messages
Determining Which Messages to Encrypt
Inserting Encryption Headers into Messages
Encrypting Communication with Other Message Transfer Agents (MTAs)
Working with Certificates
Managing Lists of Certificate Authorities
Enabling TLS on a Listener’s Host Access Table (HAT)
Enabling TLS and Certificate Verification on Delivery
Secure/Multipurpose Internet Mail Extensions (S/MIME) Security Services
14 – Using System Quarantines and Delivery Methods
Describing Quarantines
Spam Quarantine
Setting Up the Centralized Spam Quarantine
Using Safelists and Blocklists to Control Email Delivery Based on Sender
Configuring Spam Management Features for End Users
Managing Messages in the Spam Quarantine
Policy, Virus, and Outbreak Quarantines
Managing Policy, Virus, and Outbreak Quarantines
Working with Messages in Policy, Virus, or Outbreak Quarantines
Delivery Methods
15 – Centralized Management Using Clusters
Overview of Centralized Management Using Clusters
Cluster Organization
Creating and Joining a Cluster
Managing Clusters
Cluster Communication
Loading a Configuration in Clustered Appliances
Best Practices
16 – Testing and Troubleshooting
Debugging Mail Flow Using Test Messages: Trace
Using the Listener to Test the Appliance
Troubleshooting the Network
Troubleshooting the Listener
Troubleshooting Email Delivery
Troubleshooting Performance
Web Interface Appearance and Rendering Issues
Responding to Alerts
Troubleshooting Hardware Issues
Working with Technical Support
17 – References
Model Specifications for Large Enterprises
Model Specifications for Midsize Enterprises and Small-to-Midsize Enterprises or Branch Offices
Cisco Email Security Appliance Model Specifications for Virtual Appliances
Packages and Licenses
18 – Lab Outline
Verify and Test Cisco ESA Configuration
Perform Basic Administration
Advanced Malware in Attachments (Macro Detection)
Protect Against Malicious or Undesirable URLs Beneath Shortened URLs
Protect Against Malicious or Undesirable URLs Inside Attachments
Intelligently Handle Unscannable Messages
Leverage AMP Cloud Intelligence Via Pre-Classification Enhancement
Integrate Cisco ESA with AMP Console
Prevent Threats with Anti-Virus Protection
Applying Content and Outbreak Filters
Configure Attachment Scanning
Configure Outbound Data Loss Prevention
Integrate Cisco ESA with LDAP and Enable the LDAP Accept Query
DomainKeys Identified Mail (DKIM)
Sender Policy Framework (SPF)
Forged Email Detection
Configure the Cisco SMA for Tracking and Reporting