Environment

ArcSight ESM version 7.7

Situation

1. While testing outgoing email using the internal SMTP server in the manager setup, the email could not be sent to the destination mailbox.

2. Set `email.debug=true` in the `/opt/arcsight/manager/config/server.properties` file and restart the manager service.

3. Restart all services for the changes to take effect.  

/etc/init.d/arcsight_services stop
/etc/init.d/arcsight_services status - check that all services are stopped.  
/etc/init.d/arcsight_services start

4. Test outgoing email using the following command:  

/opt/arcsight/manager/bin/arcsight emailsetuptest -a checksending -preferIPv6 false -server hostname -servertype 1 -to email@example.com

**Result:**  
Testing email Notifcation settings ...
DEBUG: JavaMail version 1.5.5
DEBUG: successfully loaded resource: /META-INF/javamail.default.providers
DEBUG: Tables of loaded providers
DEBUG: Providers Listed By Class Name: {com.sun.mail.smtp.SMTPSSLTransport=javax.mail.Provider[TRANSPORT,smtps,com.sun.mail.smtp.SMTPSSLTransport,Oracle], com.sun.mail.smtp.SMTPTransport=javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle], com.sun.mail.imap.IMAPSSLStore=javax.mail.Provider[STORE,imaps,com.sun.mail.imap.IMAPSSLStore,Oracle], com.sun.mail.pop3.POP3SSLStore=javax.mail.Provider[STORE,pop3s,com.sun.mail.pop3.POP3SSLStore,Oracle], com.sun.mail.imap.IMAPStore=javax.mail.Provider[STORE,imap,com.sun.mail.imap.IMAPStore,Oracle], com.sun.mail.pop3.POP3Store=javax.mail.Provider[STORE,pop3,com.sun.mail.pop3.POP3Store,Oracle]}
DEBUG: Providers Listed By Protocol: {imaps=javax.mail.Provider[STORE,imaps,com.sun.mail.imap.IMAPSSLStore,Oracle], imap=javax.mail.Provider[STORE,imap,com.sun.mail.imap.IMAPStore,Oracle], smtps=javax.mail.Provider[TRANSPORT,smtps,com.sun.mail.smtp.SMTPSSLTransport,Oracle], pop3=javax.mail.Provider[STORE,pop3,com.sun.mail.pop3.POP3Store,Oracle], pop3s=javax.mail.Provider[STORE,pop3s,com.sun.mail.pop3.POP3SSLStore,Oracle], smtp=javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle]}
DEBUG: successfully loaded resource: /META-INF/javamail.default.address.map
Oct 25, 2024 12:12:57 PM org.masukomi.aspirin.delivery.DeliveryMaintenanceThread run
INFO: Maintenance thread started.
Oct 25, 2024 12:12:57 PM org.masukomi.aspirin.delivery.DeliveryManager run
INFO: DeliveryManager started.
Oct 25, 2024 12:12:57 PM org.masukomi.aspirin.delivery.DeliveryThread deliver
INFO: DeliveryThread (DeliveryThread-1).deliver(): Starting mail delivery. qi=DeliveryContext [qi=Mail: [id=javax.mail.internet.MimeMessage@66d2e7d9; recipient=email@example.com];];
Oct 25, 2024 12:12:58 PM org.masukomi.aspirin.delivery.DeliveryThread deliver
INFO: DeliveryThread (DeliveryThread-1).deliver(): Mail delivery failed: 550-5.7.28 [103.196.244.2       1] Gmail has detected an unusual rate of
550-5.7.28 unsolicited mail originating from your IP address. To protect our
550-5.7.28 users from spam, mail sent from your IP address has been blocked.
550-5.7.28 For more information, go to
550-5.7.28  https://support.google.com/mail/?p=UnsolicitedIPError to review our
550 5.7.28 Bulk Email Senders Guidelines. d9443c01a7336-210bbeccf44si5659045ad.67 - gsmtp
. qi=DeliveryContext [qi=Mail: [id=javax.mail.internet.MimeMessage@66d2e7d9; recipient=email@example.com];];

Cause

The email was used by the Google service domain gmail.com. The issue is caused by the configuration on the Gmail SMTP server , which does not support configuration for port 25.

Find resolution on support portal