Securing Email with Cisco Email Security Appliance

Utilizing Sensor Information from Talos Intelligence

Question

Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

The feature that utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco Email Security Appliance (ESA) is B. Connection Reputation Filtering.

Connection Reputation Filtering is a feature of Cisco ESA that uses the global threat intelligence of Talos to determine the reputation of the IP addresses of incoming email servers. The Talos intelligence consists of a network of sensors that collects and analyzes data on email traffic, web traffic, and other network traffic to identify threats such as spam, malware, and phishing attacks.

When an email server attempts to connect to Cisco ESA, the Connection Reputation Filtering feature checks the IP address of the server against the Talos database. If the IP address has a good reputation, the email is allowed to pass through. However, if the IP address has a bad reputation, the email is blocked or marked as spam.

The Talos Reputation Center provides the latest threat intelligence to the Cisco ESA, allowing it to block known bad IP addresses and filter out unwanted email traffic. The Connection Reputation Filtering feature helps to prevent inbound threats from reaching the email system, reducing the risk of malware infections, data theft, and other security incidents.

In contrast, SenderBase Reputation Filtering (A) uses a reputation database of email senders to filter incoming email, while Talos Reputation Filtering (C) is a broader term that encompasses the use of Talos intelligence across various Cisco security products. SpamCop Reputation Filtering (D) is a service that uses spam reports from users to identify and block spam messages, but it does not utilize Talos intelligence.