Overview

Cisco Secured Emails (Registered Envelope Service, also called SecureDoc) are being blocked by GFI MailEssentials due to the HTML sanitizer and Email Exploit Engine.

Environment

• GFI MailEssentials
• All supported environments

Root Cause

Although these emails are from a trusted source, the method in which they are being sent legitimately registers as an email exploit. Since there is no whitelisting functionality for the Email Exploit Engine, these two rules that trigger on these email types will have to be disabled.

Resolution

1. Open the GFI MailEssentials Configuration Console.
2. Expand the EmailSecurity node, then click on the HTML Sanitizer to open its properties.
3. Select the Whitelist tab and make an entry for the address that is sending the emails. Note that this is not for cisco.com, res.cisco.com, etc.
4. Expand the Email Exploit Engine branch and point to Email Exploit Engine.
5. Check off rule IDs 7 and 10, then hit the Disable Selected button at the top.
6. Hit OK and exit the console. Send a test email to confirm the operation is successful.