CiscoProfessional4 daysUpdated: July 2026

SESA Training for Your Team — Securing Email with Cisco Email Security Appliance

Email remains the front door for most compromises — and the mail gateway is usually configured once, by someone who has since left, and touched only when something breaks. SESA (Securing Email with Cisco Email Security Appliance) exists for the team that inherits that box: four days on the full mail pipeline, from connection filtering and spam verdicts through malware defense, content policy, DMARC enforcement and outbound DLP.

The course maps to exam 300-720, one of the CCNP Security concentrations, so it doubles as a certification step for engineers pairing it with the SCOR core. But most teams book it for a plainer reason: a phishing incident, an audit question about email DLP, or a DMARC project that stalled at “p=none”.

As a training operator, we arrange SESA delivery through authorized partners with instructors who run mail security in production — live online in your time zone, at your site, or as a private group weighted toward your gateway estate.

Request training options Request full agenda

Who this course is for

Email administrators taking over a Cisco Secure Email Gateway estate
Security engineers adding email defense to a broader Cisco security role
Messaging teams migrating from another mail-security product
Candidates preparing the email concentration within the CCNP Security track

What your team will learn

Topic areas below are grouped in our own words. The full official agenda is available on request — it comes from the authorized partner as part of your quote.

The mail pipeline end to end: what actually happens to a message between the internet and the inbox
Anti-spam and graymail policy that blocks junk without eating the invoices
Stopping malicious attachments and links before anyone gets the chance to click
SPF, DKIM and DMARC — proving your mail is yours and rejecting mail that only claims to be
Content filters and outbound data-loss prevention for the messages that should never leave
Encryption, quarantines and the daily care and feeding of a mail gateway

Request full agenda

Key facts

Duration	4 days
Level	Professional
Prerequisites	TCP/IP and email fundamentals (SMTP, DNS) plus basic experience administering a mail environment
Certification	Prepares for exam 300-720 SESA — a CCNP Security concentration
Formats	Live online (VILT), On-site at your location, Private group, Seats in scheduled groups
Languages	English + local-language instructors on request

Formats and how we organize it

Live online (VILT)
On-site at your location
Private group
Seats in scheduled groups

One request → three options

Fill in the form below — it takes a couple of minutes. Within 5 business days you compare 2–3 concrete offers — provider, instructor, dates, price below the public list. We contract and administer the delivery end to end. Details:how we work and vendor training.

SESA vs alternatives: which to choose

Factual criteria only — level, duration, audience and certification. The right choice depends on your team's starting point and stack.

Cisco SWSA (Web Security Appliance)

The web-traffic counterpart: proxy policy, TLS decryption and URL controls in a 2-day format. Choose SWSA when the project is outbound web filtering; SESA when the exposure is inbound and outbound email. Many gateway teams run both back to back.

Cisco SCOR (Security Core)

The 5-day CCNP Security core across firewalling, VPN, secure access and content security. Choose SCOR for the broad certification foundation; SESA is the deep concentration for the team that owns the mail gateway specifically.

A custom intensive

If your real project is a DMARC rollout or a migration from another email-security product onto the Cisco gateway, a custom 2–3 day program on our materials rehearses exactly that cutover instead of the full curriculum.

Need only part of SESA?

If your team needs a subset of this program — or a mix of topics from several courses — we build a custom 2–4 day intensive on our own materials, shaped by your infrastructure. One custom program typically replaces 2–3 catalog courses.

Explore custom courses

SESA: frequently asked questions

Does SESA cover cloud email gateways or only hardware appliances?

The policy engine and mail pipeline are the same across hardware, virtual and cloud gateway deployments, and the course teaches that common layer. Instructors flag deployment-specific differences, and in private groups can weight examples toward the form factor your estate actually runs.

Does this course count toward CCNP Security?

Yes. Exam 300-720 SESA is one of the CCNP Security concentration exams. Combined with the core exam 350-701 (the SCOR course), it completes the certification. We can plan both courses as one sequence for your team.

We run Microsoft 365 — is a dedicated gateway course still relevant?

The course is about the Cisco gateway layer many organizations keep in front of or alongside cloud mailboxes for filtering, DLP and DMARC enforcement. If your architecture question is whether to keep that layer, raise it in the form and we scope accordingly.

How much of the course is hands-on?

Labs run on the Secure Email Gateway itself: building mail policies, tuning spam and malware verdicts, configuring SPF/DKIM/DMARC checks, content filters and quarantines. The goal is that participants leave able to change production policy without guessing.

How do we organize SESA training?

Fill in the request form on this page — team size, format, timing. Within 5 business days you receive 2–3 options from authorized partners with vetted instructors, dates and prices below public lists.

Request 2–3 SESA training options — quotes within 5 business days

No commitment — describe the task and we come back with concrete options, dates and prices.

Cisco, SESA and course names are trademarks of their respective owners. Uptime Skills is an independent training operator and is not affiliated with or endorsed byCisco. Official courses are delivered by authorized training partners.