ESA is not sending emails in RSA Security Analytics 10.4 and above

[#1]

Article Number

000032462

Applies To

RSA Product Set: Security Analytics
RSA Product/Service Type: Event Stream Analysis (ESA)
RSA Version/Condition: 10.4.x, 10.5.x
Platform: CentOS
O/S Version: EL6

Issue

ESA cannot send emails. An error similar to below is seen in the /opt/rsa/esa/logs/esa.log file.
 

A notification for 55efcc95f280f761c270a257 could not be sent. Reason: org.apache.commons.mail.EmailException: Sending the email to the following server failed : 10.250.50.200:25

Resolution

To resolve the issue, follow the steps below.

1. Ensure port 25 is open on the firewall from the ESA to the SMTP server using the command below.

   
   curl -v <SMTP_SERVER>:25

2. If the command above returns a successful connection but the error still persists, speak with the Email Admin and make sure that the ESA server IP has been added to the SMTP connector list.