topic Re: MTA on R80.40 with A/A Setup in Firewall and Security Management

MTA on R80.40 with A/A Setup

Blason_R — Sun, 26 Jul 2020 15:23:18 GMT

Hi Team,

I am planning to move to R80.40 and have below queries.

I have 2 appliances with R80.30; acting as a MTA only and having AB/AV/FW blades are running. Those are being managed by separate management server which is again on R80.30. My MX is pointed to other on-prem Ironport appliance which is accepting mail and then forwards the mail to these MTA domain wise. We are catering to around 7-8 domains

I am planning to upgrade to R80.40 and I don't see any issue with mgmt server; however

Will I get any advantage making MTA cluster A/A?
Any ways queue is not going to be synced; of course it wont since its postfix. Then per me failover makes no sense here.
Then MTA will listen on Physical interface instead on Virtual interface.
Will it accept the mail on Virtual interface mail and both will process the queue? Or if not which one will process the queue? Will it be process in Round-Robin fashion?
If not and if postfix is listening on physical interface; I will have to relay mails on my ironport to Physical IP address of the appliances or cluster IP of appliances?
Plus, Anti-Phishing and on-click-url protection are still in EA in R80.40?

Can someone please shed light on my queries?

TIA

Blason R

Re: MTA on R80.40 with A/A Setup

G_W_Albrecht — Mon, 27 Jul 2020 10:08:49 GMT

Why not consult TAC for this change ?

Re: MTA on R80.40 with A/A Setup

Blason_R — Mon, 27 Jul 2020 10:14:41 GMT

Hmm..really don't feel to reach to TAC which I believe can be sorted out with community help. I mean its not break-fix.

Re: MTA on R80.40 with A/A Setup

Blason_R — Mon, 27 Jul 2020 11:39:19 GMT

Nah - Threat extraction can not be enabled on A/A setup.

Re: MTA on R80.40 with A/A Setup

G_W_Albrecht — Mon, 27 Jul 2020 15:11:36 GMT

sk108553: Mail Transfer Agent (MTA) - FAQ

sk109699: ATRG: Mail Transfer Agent (MTA)

sk107093: E-mails do not reach the client after selecting Cluster Virtual Interface(s) in MTA "Advanced Settings"