what is different between Mail Transfer Agent (MTA). and legacy mode

KhaledMaged,

using MTA, the XG will work as a standard proxy on Email. So it is an additional Email server that will manage the email traffic.

For example, you receive emails from eveyone on Internet and the email is sent to XG MTA Public IP, which controls the Email and route the email internally to another Email server (Exchange for example).

Using as legacy, XG IP will not appear inside the email traffic.

MTA is more powerful, because some additional email spamming checks can be used. Also using MTA, XG will cache emails in case the internal servers is not working. This is not possible for legacy mode.

Regards

KhaledMaged,

using MTA, the XG will work as a standard proxy on Email. So it is an additional Email server that will manage the email traffic.

For example, you receive emails from eveyone on Internet and the email is sent to XG MTA Public IP, which controls the Email and route the email internally to another Email server (Exchange for example).

Using as legacy, XG IP will not appear inside the email traffic.

MTA is more powerful, because some additional email spamming checks can be used. Also using MTA, XG will cache emails in case the internal servers is not working. This is not possible for legacy mode.

Regards

thank you for your clarification, but I need some more details:

1-  legacy mode can deny emails or reject and I believe his happened as sometimes I'm not receiving emails with attaching of WinRAR, so where I can find the quarantine of bad emails ?

2- can I use MTA mode if my mail server in ISP not in exchange for example?

Khaled,

for the 1. point, check how the email are threated when they have an attachment. Quarantine is available on User Portal and XG Admin page.

2. Of course you can. You need to make sure that your domain MX record is your XG WAN ip and then redirect email to your ISP email server, if you want to filter email.

Regards

Thanks for your reply, for Quarantine, you mention it is available on User Portal and XG Admin page,  I can't find it in XG mode or user portal only SMTP Quarantine !!!

can any one help here please ?

You can access user portal by going to your XG IP address (usually public IP) https://publicIP:443 you can also change the user portal port by going to administration --> admin settings --> admin port settings.

If you want to look at quarantine in XG, then go to Email --> SMTP quarantine section. 

Hope this helps.

this i already know, but the point is SMTP quarantine section always empty 

I am running a test (Test Connection - Relaxed TLS) from Mimecast to the public address of our mail server. The public address is managed by a Sophos XG firewall (the firewall sits between Mimecast and the on-premis Exchange server). The test fails with "220 ******************" and "500 5.3.3 Unrecognized command XXXX". The firewall is in MTA mode, but the firewall admin says there is no SMTP inspection and the firewall plays no role other than to forward the SMTP traffic to the internal Exchange server. Is it possible that simply being in MTA mode may cause the errors I am seeing?