The Cisco IronPort E-mail Security Appliance (ESA) makes various statuses available in an XML format and you can use PowerShell to parse the XML data and get some useful information. With this technique you can create a report about the IronPort delivery status in your environment. Forget about trying to force PowerShell into using some sort of SSH connection method. I’ve tried it and it isn’t pretty. There is a security concern with the following method but it is a proof of concept that may work well in your environment. Here are the ingredients to get you started:
- A Cisco IronPort E-mail Security Appliance (ESA) and a need to access the status pages.
- An account that can authenticate to the ESA, preferably with the guest role.
- A locked down environment that will reduce attack surfaces within your organization.
The methodology is rather simple, use PowerShell to grab an XML status page and parse it into an object that can be massaged for your benefit. Think of having a script send you a periodic report about the IronPort delivery status of your appliance, awesome! To illustrate, I’ll be looking at the tophosts status since I really want to know about my partner organizations that could be having problems. Why not automate and be proactive at the same time?