Security Filtering Features

If you followed this chapter closely, you now have a fully production-capable ESA configuration that can send and receive mail. You’ve selected a network configuration that suits your deployment model, and you’ve tested network connectivity and established static routes as needed. Because of the SSW, you have a basic but thorough filtering policy and proper settings for accepting and delivering email.

At this point, the product is ready for production deployment: You can create a new MX record, change an existing MX, or alter a static NAT, and I’m confident you can put the device into its role as your gateway mail server. The security services that were enabled in the SSW give us thorough protection against spam, phishing, and viruses, without any further configuration. We’ll examine what has been set up by the SSW here.