The Cisco ESA device is designed to monitor Simple Mail Transfer Protocol (SMTP)
The Cisco ESA is constantly updated by real-time feeds from the Cisco Talos, which detects and correlates threats and solutions by using a worldwide database monitoring system
This threat intelligence data is pulled by the Cisco ESA every three to five minutes