AutoSpamEmailScan.ps1 is used to monitor a specific mailbox that enterprise users can forward suspicious spam emails to a specific mailbox.

Nagios plugin to monitor Cisco IronPort Email Security Appliances via SNMP

Correlate IronPort messages into one JSON document

"ESA_SPAM_QUARANTINE_BLOCKLIST.ps1" is used to add "email address" or "domain name" into ESA SPAM QUARANTINE BLOCKLIST by calling the ESA API

IronPort exporter for Prometheus

cluster_ESA_backup.sh is a fork of "https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118403-technote-esa-00.html". This version is much better than the Cisco original one.

Config for Logstash for Ironport Cisco ESA c600v

Utility to parse safe/blocklist backup data from Cisco IronPort into various reporting formats