I was working with Cisco ESA (previously - Ironport) lately and would like to write down some notes about how it works (at least the basics). I've already covered spam and antivirus testing techniques in a previous post. Here I'll try to walk through the message filtering steps performed by a Cisco ESA appliance. email, antivirus, ironport, esa, smtp, antispam, cisco