Email Recipient Verification from AD

Question

Hi All, Newbie with XG125 V18 , and my 1st post 
 On the XG125 Email > Policies -> SMTP Route & Scan -> Recipient Verification 
 the Option for "In Active Directory" 
 If you point to the appropriate Base DN, what is the XG125 actually checking. Is it looking to find a match for the E-Mail address in the AD users profile ? 
 
 so for example if my Active Directory contained

Username 
 email address

user1 
 email1@domain.com

user2 
 test1@domain.com

distList 1 
 group1@domain.com

Test 
 Incoming email addresses to 
 Expected XG result 
 notes

1 
 test1@domain.com 
 XG Would Pass 
 matches User2

2 
 group1@domain.com 
 XG Would Pass 
 matches distlist1

3 
 user2 @domain.com 
 XG Would Fail 
 ( because user2 is not a valid email address )

Is my understanding correct ? 
 
 Thanks 
 Chris

FormerMember · Accepted Answer

Hi Supertramp4 
 Thank you for reaching out to the Community! 
 Yes, with Active Directory recipient verification XG will reject the email if a recipient probe fails. 
 "In Active Directory: Verifies recipients of inbound emails with the AD server over simple, SSL, and STARTTLS protocols. Specify the AD server, bind DN, and base DN. 
 Bind DN is the full distinguished name (DN), including the common name (CN) of the administrator user configured in the AD server that you've specified". 
 Note: Verification times out in 30 seconds. 
 Document link: http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/tasks/SMTPProfileEdit.html . 
 Thanks,

Email Recipient Verification from AD

Top Replies