Guest

Preview Tool

Cisco Bug: CSCul90516 - ESA must verify FQDN of receiving machine against names in SANS certs

Last Modified

Feb 26, 2018

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

7.6.3-019 8.0.1-106

Description (partial)

Symptom:
Prior to this fix, TLS verification against hosted cloud email services fails when:
• Cloud provider presents a common certificate for all hosted domains.
• The destination controls for these domains have TLS Support set to Required-Verify.

Conditions:
While sending mail from an ESA to a domain hosted by a cloud provider:
• Cloud provider presents a common certificate for all hosted domains.
• The destination controls for these domains have TLS Support set to Required-Verify on ESA.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.