Cisco ESA Main Features List : Access control: Controlling access for inbound senders, according to a sender’s IP address, IP address range, or domain name. Anti-spam: Multilayer filters based on Cisco SenderBase reputation and Cisco antispam integration. The antispam reputation and zero-day threat intelligence are fueled by the Cisco security intelligence and research group named Talos. Network Anti-virus: Network antivirus capabilities at the gateway. Cisco partnered with Sophos and McAfee, supporting their antivirus scanning engines. Advanced Malware Protection (AMP): Allows security administrators to detect and block malware and perform continuous analysis and retrospective alerting. Data loss prevention (DLP): The ability to detect any sensitive emails and documents leaving the corporation. The Cisco ESA integrates RSA email DLP for outbound traffic. Email encryption: The ability to encrypt outgoing mail to address…

Covered HERE

When the system analyzes traffic as part of your access control deployment, the network analysis (decoding and preprocessing) phase occurs before and separately from the intrusion prevention (intrusion rules and advanced settings) phase The following diagram illustrate, in a simplified fashion, the order of traffic analysis in an inline, intrusion prevention and advanced malware protection (AMP) deployment. It illustrates how the access control policy invokes other policies to examine traffic, and in which order those policies are invoked. In an inline deployment, the system can block traffic without further inspection at almost any step in the illustrated process. Security Intelligence (IP SI , URL SI , DNS SI), the SSL policy, network analysis policies, file policies, and intrusion policies can all either drop or modify traffic. Only the network discovery…

CCIE RS v5 IGP Sample Topology & Core Topics: •TCP/IP (IPv4/IPv6) •Access, VLAN, Trunking, STP, LACP/PAgP, PPP, CHAP/PAP •Routing (admin, static, default, dynamic, filtering, summarization, redistribution) •RIP, EIGRP, OSPF, ISIS*, BGP and Intra-domain PIM •MPLS VPN, DMVPN, GRE •Device vsNetwork Security (L2/L3) •System management (SNMP, Logging, Lines) •Quality of Services (MQC) •Network Services (FHRP, NTP, DHCP, NAT) •Network Optimization (SLA, Tracking, Netflow, EEM, PfR*)  

Cisco Email Security Appliance Inbound/Outbound Email Flow Illustrated  

Traffic flow illustrating how ASA handles FirePOWER services module traffic flow •Traffic enters the ASA. •Incoming VPN traffic is decrypted (If using VPN). •Firewall policies are applied. •Traffic is sent to the ASA FirePOWERmodule. •The ASA FirePOWERmodule applies its security policy to the traffic, and takes appropriate actions. •Valid traffic is sent back to the ASA; the ASA FirePOWERmodule might block some traffic according to its security policy, and that traffic is not passed on. •Outgoing VPN traffic is encrypted. •Traffic exits the ASA.