300-720 · Question #48
Which default port is used by the Cisco ESA to quarantine the message on the Cisco Security Management Appliance?
The correct answer is D. port 6025/TCP. The Cisco ESA uses port 6025/TCP by default to deliver quarantined messages to the centralized quarantine service on the Cisco Security Management Appliance.
Question
Which default port is used by the Cisco ESA to quarantine the message on the Cisco Security Management Appliance?
Options
- Aport 25fTCP
- Bport110/TCP
- Cport443/TCP
- Dport 6025/TCP
- Eport4766/UDP
How the community answered
(34 responses)- B3% (1)
- C6% (2)
- D88% (30)
- E3% (1)
Why each option
The Cisco ESA uses port 6025/TCP by default to deliver quarantined messages to the centralized quarantine service on the Cisco Security Management Appliance.
Port 25/TCP is the standard SMTP port used for general mail transfer, not for the specialized ESA-to-SMA quarantine delivery channel.
Port 110/TCP is the POP3 protocol port used for mailbox retrieval by end-user clients and has no role in ESA-to-SMA quarantine communication.
Port 443/TCP is HTTPS, used for web-based management interfaces; it is not the designated port for the quarantine message transfer service.
Port 6025/TCP is the dedicated default port on the Cisco SMA that listens for quarantine message submissions from ESA appliances. When centralized quarantines are enabled, the ESA opens a TCP connection to the SMA on this port to transfer messages that match quarantine policies.
Port 4766/UDP is not a defined Cisco ESA or SMA service port, and the quarantine transfer protocol uses TCP, not UDP.
Concept tested: Cisco ESA to SMA centralized quarantine port 6025
Source: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma14-0/user_guide/b_SMA_Admin_Guide_14_0/b_SMA_Admin_Guide_chapter_01001.html
Topics
Community Discussion
No community discussion yet for this question.