From this page, you can access network interface configuration, DNS settings, static routes, SNMP, syslog and set country policies.
Network Settings
From this section you can configure the appliance basic networking settings.
Here you can set the appliance hostname. It must be an FQDN hostname.
Here you can also set the appliance DNS servers. The Primary DNS server isn't editable as it's the local resolver (the onboard DNS server). You can edit the Alternate DNS server, instead.
Network interfaces
For each virtual network card attached to the appliance is displayed the card name and its MAC address as section title. Below these information you can perform a dedicated network configuration, setting the IP address, the Netmask and the Gateway.
DNS Conditional Forwarders
When using local resolver as primary DNS, you may have the need to configure conditional DNS forwarders for specific domains. Here you can set a dedicated DNS server configuration for a specific domain.
Hosts File
From this table you can modify the appliance system hosts file. Modifying your hosts file allows you to override the DNS resolution for a host or a domain.
Static Routes
From this section you can configure static routes in order to route a specified network via a specified gateway and virtual network interface.
SNMP Monitor
From this section you can configure the SNMP service.
NOTE: LibraCyber ESG support SNMP protocol version 2c.
You can enable or disable the service by clicking on the "Enable" or "Disable" button. In order to use the SNMP service you must set a Read Only Community and an IP range allowed to connect to the SNMP server of the appliance. The IP range format must be x.x.x.x/n where n is the subnet mask in CIDR format (i.e. 192.168.4.3/32).
Below are the custom LibraCyber ESG variables (OIDs) you can monitor via SNMP. If you use Zabbix as SNMP monitor, you can use this template.
Syslog
LibraCyber ESG can export all logs to a remote Syslog Server. To configure it simply Enable the remote syslog service by clicking on the "Enable" button, and specify your syslog server IP address, port and syslog protocol.
You can decide to log optional email information by flagging them on this section (such as email subject or rewritten URLs).
You can also improve security by uploading and installing a TLS certificate in the Standard PEM - Base64 format.
Country Policies
From this section you can decide to limit the web UI login from or to specific countries. You can create a list of allowed or blocked countries, and the default behavior if no policy matches. The UI will be blocked preventing login from that country. Block is based on the origin IP address.
NOTE: If you need to reset the block (if you made a mistake), you can log into the console via SSH or from your hypervisor and reset the block.
IPv6 Support:
IPv6 protocol is supported by the Email Security solution both at the operating system level and at the application level, specifically in the handling of metadata related to the transit hops of an email message. The solution is therefore able to correctly process, interpret, and track the IPv6 information contained in the message routing headers.
Please note that, at the present time, sending and receiving email messages over the IPv6 protocol is not yet supported. This functionality has already been planned and is included in the product development roadmap, with delivery scheduled for the first quarter of 2027 (Q1 2027).