Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

How long does it take for DHA protection to see new e-mail addresses in Active Directory?

We added some new employees yesterday to our AD and Exchange servers and then had some external e-mails sent to them from the company doing our payroll. The DHA protection kicked in and the e-mails were bounced. When I tested the usernames in the appliance, it found them just fine. Does the DHA protection use some kind of cache that's updated periodically? I ended up having to disable DHA protection to get e-mails to come in to the new accounts without bouncing. Then, this morning, I turned it back on, and external e-mails come in just fine.

Category: Email Security Appliances
Reply

Best Answers

  • CORRECT ANSWER
    BWCBWC Cybersecurity Overlord ✭✭✭
    Accepted Answer

    Hi @Trevor

    usuaully within one hour the LDAP users should be imported into the usermap.xml. You can find the frequency setting at 'Manage -> System Setup -> Server -> LDAP Configuraiton, lokk at Global Configurations.

    To check if your usermap.xml is current you can download it at Manage -> System Setup -> Server -> Advanced. Over here you have to browse through the Download System/Log Files Typ of file, select Data Directory in the list and then usermap.xml. Super easy, convinient and user friendly to the max.

    I had situations where usermap.xml was populated but DHA protection still complained, but in general it works.

    Hope this help a little.

    Stay safe.

    --Michael@BWC

  • CORRECT ANSWER
    GailandGailand SonicWall Employee
    Accepted Answer

    The frequency is hard coded to one hour. If you add users to your Active Directory, all you have to do is go to the Users section and click the button "Refresh Users & Groups" and the system will immediately poll the AD server and pull them down. This way, you do not have to wait the hour to begin using the new addresses.

    To see if your usermap.xml is current, You need to go to Monitor, System Status, and look at the time listed beside "Last updated timestamp for usermap.xml:"

Answers

Sign In or Register to comment.