Primary Gateway
Before you complete these steps, import and verify your domains on the Configuration page as described in User Added Domains
To use Secure Email Threat Defense as a primary gateway, you need to set up your mail host to send traffic to Secure Email Threat Defense. This involves changing your DNS MX record. The steps will vary depending on your provider.
Configure Incoming Message Traffic
-
To allow Secure Email Threat Defense to receive incoming email on behalf of your domain, update your DNS MX record to point to your Secure Email Threat Defense environment. The destination depends on where your Secure Email Threat Defense instance is hosted.
Table 1. DNS MX Record Settings by Region
| Environment | DNS Record |
|---|---|
| North America | mx.us.etd.cisco.com |
| Europe | mx.eu.etd.cisco.com |
| India | mx.in.etd.cisco.com |
| Australia | mx.au.etd.cisco.com |
| United Arab Emirates | mx.ae.etd.cisco.com |
| Beta | mx.beta.etd.cisco.com |
| Government | mx.usgov.etd.cisco |
-
Configure your domain to enable Secure Email Threat Defense to deliver incoming email to your mailboxes. Configure your mail server to accept messages from the IP addresses listed in the table below. The IP addresses differ depending on your region. You can retrieve the an updated list of IPs using the corresponding host name.
Example: dig host.<region>.etd.cisco.com retrieves the corresponding IPs for the region.
Table 2. Regional Host Names and IPs
| Region/Environment | Host Name | IPs |
|---|---|---|
| North America | host.us.etd.cisco.com |
3.41.135.128 3.41.135.129 3.41.135.130 3.41.135.131 3.41.135.132 3.41.135.133 3.41.135.134 3.41.135.135 3.41.135.136 3.41.135.137 3.41.135.138 3.41.135.140 3.41.135.142 3.41.135.143 3.41.135.148 3.41.135.151 |
| Europe | host.eu.etd.cisco.com |
18.96.45.104 18.96.45.100 18.96.45.102 18.96.45.96 18.96.45.99 18.96.45.103 18.96.45.97 18.96.45.107 18.96.45.98 18.96.45.101 18.96.45.106 18.96.45.105 |
| India | host.in.etd.cisco.com |
18.96.227.160 18.96.227.161 18.96.227.162 18.96.227.163 18.96.227.164 18.96.227.165 18.96.227.166 18.96.227.167 18.96.227.168 18.96.227.169 18.96.227.170 18.96.227.171 |
| Australia | host.au.etd.cisco.com |
3.44.64.89 3.44.64.90 3.44.64.83 3.44.64.80 3.44.64.82 3.44.64.84 3.44.64.85 3.44.64.88 3.44.64.86 3.44.64.87 3.44.64.91 3.44.64.81 |
| United Arab Emirates | host.ae.etd.cisco.com |
18.96.96.48 18.96.96.49 18.96.96.50 18.96.96.51 18.96.96.52 18.96.96.53 18.96.96.54 18.96.96.55 18.96.96.56 18.96.96.57 18.96.96.58 18.96.96.59 |
| Beta | host.beta.etd.cisco.com |
3.41.135.144 3.41.135.147 3.41.135.146 3.41.135.150 3.41.135.149 3.41.135.145 3.41.135.139 3.41.135.141 |
| Government | host.usgov.etd.cisco |
195.146.171.50 195.146.171.51 195.146.171.100 195.146.171.101 195.146.171.150 195.146.171.151 |
-
In Secure Email Threat Defense, go to Configuration > Analysis configuration > Domains > Imported Domains and click Update List. Verify that the expected domains are imported and can accept traffic.