68-11
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 68 E-Mail Proxy
Default Servers
Note IMAP generates a number of sessions that are not limited by the simultaneous user count but do count
against the number of simultaneous logins allowed for a username. If the number of IMAP sessions
exceeds this maximum and the Clientless SSL VPN connection expires, a user cannot subsequently
establish a new connection. There are several solutions:
- The user can close the IMAP application to clear the sessions with the adaptive security appliance, and
then establish a new Clientless SSL VPN connection.
- The administrator can increase the simultaneous logins for IMAP users (Configuration > Features >
VPN > General > Group Policy > Edit Group Policy > General).
- Disable HTTPS/Piggyback authentication for e-mail proxy.
• Mailhost—(SMTPS only) Select to require mailhost authentication. This option appears for SMTPS
only because POP3S and IMAP4S always perform mailhost authentication. It requires the user’s
e-mail username, server and password.
Modes
The following table shows the modes in which this feature is available:
Default Servers
This panel lets you identify proxy servers to the adaptive security appliance. Enter the IP address and
port of the appropriate proxy server.
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• — • ——