An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and…

Question

Options

• AModify DLP configuration to ensure that all attachments are permitted for test.com.
• BModify DLP configuration to exempt DLP scanning for messages sent to test.com domain.
• CModify mail policies so email recipients do not match multiple policies.
• DModify mail policies for cisco.com to ensure that emails are not dropped.

• A
  3% (1)
• B
  3% (1)
• C
  84% (27)
• D
  9% (3)

Explanation

On Cisco ESA, when an inbound email is addressed to recipients in multiple domains, the appliance checks which mail policy applies to each recipient. If recipients in different domains (cisco.com and test.com) match different mail policies, the ESA performs 'policy splitting' - it processes a separate copy of the message for each policy group. This split can cause inconsistent behavior, such as attachments being stripped or messages being dropped for one policy group but not another. The correct fix is to modify mail policies so that recipients across domains do not match multiple conflicting policies simultaneously. This may involve consolidating policies, adjusting recipient conditions, or ensuring both domains fall under a unified policy that handles attachments consistently. The DLP options (A and B) do not address the root cause, which is a mail policy matching conflict, not a DLP scanning rule issue.

No community discussion yet for this question.