Sophos UTM: SG430 (9.506-2) I want to enable in the SMTP Routing tab the recipient verification against the Active Directory. But the big problem is, if I choose Active Directory I can't choose a server from the given dropdown list. Even though I created several entries: SSL Enabled/Disabled Various AD Service Accounts With/Without Base DN given HA Group Single host Final result: A dropdown with the option "None" How do you manage the recipient verification, do you use the AntiSpam Agent on Exchange via the Edge Transport role? Main problem is, our appliance is mostly on 100% CPU load because of the SMTPD service works on bounced emails. Thanks in advance!

Hi, This is a known bug and the fix will be released in v9.5 MR6 (9.508). The bug ID associated with this issue is NUTM-9337. Thanks

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SMTP Routing recipient verification against AD/LDAP - no Server available

Henning Werner over 6 years ago

Sophos UTM: SG430 (9.506-2)

I want to enable in the SMTP Routing tab the recipient verification against the Active Directory.

But the big problem is, if I choose Active Directory I can't choose a server from the given dropdown list.

Even though I created several entries:

SSL Enabled/Disabled
Various AD Service Accounts
With/Without Base DN given
HA Group
Single host

Final result: A dropdown with the option "None"

How do you manage the recipient verification, do you use the AntiSpam Agent on Exchange via the Edge Transport role?
Main problem is, our appliance is mostly on 100% CPU load because of the SMTPD service works on bounced emails.

Thanks in advance!

This thread was automatically locked due to age.

0 Alexander Busch over 6 years ago

Well I use the recipient verification against AD in the UTM. As you try to do this this is the right strategy if the UTM is the edge or perimeter in your mail flow.

To use use it you have to specify an ActiveDirectory server under definitions & users....

Is the test there working? I use port 389 without SSL.

Best

Alex

-
Cancel
Vote Up 0 Vote Down

Cancel
0 Henning Werner over 6 years ago in reply to Alexander Busch

Yes in my case the UTM is the edge.

Yep the tests are working under definitions & users.

---

Have you also installed version 9.506-2?
Cancel
Vote Up 0 Vote Down

Cancel
0 Alexander Busch over 6 years ago in reply to Henning Werner

Ok, sorry the server there is enabled? I don't have more hints. Open a support case at sophos if no one else is replying.

Maybe tell the solution here, I would like to know.

Cross my fingers for you.

-
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago

Hi Henning and welcome to the UTM Community!

Show us a picture of the Edit of an entry with SSL not enabled with a Base DN and with the Host open in Edit.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
+1 sachingurung over 6 years ago

Hi,

This is a known bug and the fix will be released in v9.5 MR6 (9.508). The bug ID associated with this issue is NUTM-9337.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Henning Werner over 6 years ago in reply to sachingurung

Hi,

thanks for you reply, are there any ETA for the 9.5 MR6?
Cancel
Vote Up 0 Vote Down

Cancel
0 ThomasBeckert over 6 years ago in reply to sachingurung

Hi,

I have exect the same Problem on customer site, and it seems with this bug it is impossible to change exiting SMTP-profiles with AD recipient verification check is enabled.

Changed profile will not be saved.

Is there a workaround for this bug, or is there a possibility to change this profile at command line (I have to delete a domain entry)?

regards,

Thomas
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to ThomasBeckert

Hi Thomas,

What happens if you set recipient verification to "Off" first, change/save a Profile and then change back to AD?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel