300-720 · ● Retiring August 26, 2026 · Professional · Cisco
Exam facts
| Field | Value |
|---|---|
| Cost | $300 USD (concentration exam); $400 USD for core CCNP exam |
| Duration | 90 minutes |
| Questions | Not officially disclosed; estimated 60-80 questions |
| Passing Score | Not publicly disclosed; Cisco uses scaled scoring (300-1000 scale) |
| Format | Multiple choice, drag-and-drop, simulation-based |
| Delivery Method | Computer-based (Pearson VUE testing centers OR OnVUE proctored online) |
| Languages | English |
| Validity Period | 3 years from certification date |
| Renewal | Requires passing recertification exam or completing approved activities |
| Prerequisites | No formal prerequisites; 3-5 years security experience recommended |
| Releasing | Currently active (v1.1) |
| Retiring | August 26, 2026 |
Vendor source — Cisco Exam Details
Official exam topics — Cisco Learning Network - SESA Exam Topics
Registration — Pearson VUE Cisco Exams
About
The Securing Email with Cisco Email Security Appliance (SESA 300-720) exam validates expertise in administering, configuring, and troubleshooting Cisco Secure Email Gateway (formerly known as Cisco Email Security Appliance). This 90-minute professional-level concentration exam tests knowledge of email security administration, spam and malware filtering, encryption, data loss prevention, directory integration, and message routing. Passing this exam earns the Cisco Certified Specialist - Email Content Security credential and satisfies one of the concentration exam requirements for the Cisco Certified Network Professional (CCNP) Security certification.
Domain context — Security
Email represents one of the most prevalent attack vectors in enterprise environments. Organizations face threats from phishing, malware distribution, data exfiltration, and business email compromise (BEC). The SESA 300-720 certification addresses the critical need for security professionals who can design, deploy, and maintain email security solutions that protect organizational assets while maintaining business continuity. This concentration is essential for security architects and administrators responsible for securing corporate email infrastructure against evolving threats.
Topics covered
The 300-720 SESA v1.1 exam blueprint evaluates candidates across six primary knowledge domains:
| Domain | Weight | Topics |
|---|---|---|
| Cisco Email Security Appliance Administration | 15% | System setup, initial configuration, administrative interfaces, policy configuration, operational management, appliance health and performance monitoring |
| Spam Control with Talos SenderBase and Antispam | 15% | Anti-spam policy configuration, sender reputation systems (Talos), detection algorithms, spam scoring, whitelisting and blacklisting strategies |
| Encryption and Secure Email Transport | 15% | Email encryption mechanisms, TLS/SMTPS configuration, encrypted connection setup, certificate management, secure transport protocols |
| Directory Integration and Authentication | 15% | LDAP integration, directory services configuration, user authentication methods, directory synchronization, user management |
| Email Threat Protection and Content Filtering | 15% | Antivirus and anti-malware filtering, URL reputation filtering, advanced malware detection, content filtering policies, attachment handling |
| Quarantine Management and Message Delivery | 10% | Quarantine management, message routing, delivery policies, system quarantine configuration, non-delivery reports (NDRs) |
Key competency areas:
- Email security architecture and Secure Email Gateway operation
- Threat prevention (malware, spam, phishing)
- Data loss prevention (DLP) and content inspection
- Email encryption and secure communications
- Compliance and regulatory requirements (GDPR, HIPAA, etc.)
- System administration and troubleshooting
Common job-ready skills
Passing the 300-720 SESA exam demonstrates readiness for:
- Email Security Administration: Configure and manage Cisco Secure Email Gateway appliances for enterprise deployments
- Threat Detection and Prevention: Implement and tune anti-spam, antivirus, and anti-malware policies
- Encryption Management: Deploy email encryption and establish secure transport channels (TLS)
- DLP Implementation: Configure data loss prevention policies to prevent unauthorized information disclosure
- Directory Integration: Integrate email security systems with LDAP/Active Directory for authentication and user management
- Policy Optimization: Develop and maintain email security policies balancing protection with user productivity
- Troubleshooting: Diagnose and resolve email delivery issues, quarantine management, and system performance problems
- Compliance Monitoring: Ensure email security compliance with regulatory requirements and organizational standards
- Log Analysis: Review and analyze email security logs for threat investigation and forensics
Recommended courses
-
Official Cisco Training:
- SESA - Securing Email with Cisco Email Security Appliance (self-paced or instructor-led)
- Cisco Learning Network - CCNP Security training paths
-
Third-Party Training Providers:
- CBT Nuggets - CCNP Security complete course series
- Udemy - Cisco 300-720 SESA exam preparation courses
- Linux Academy - Email security fundamentals and Cisco ESA
- Global Knowledge - SESA instructor-led and online training
-
Recommended Prerequisites:
- CCNA or equivalent networking fundamentals
- Basic understanding of SMTP, IMAP, POP3 email protocols
- Familiarity with security concepts and threat landscape
Practice exams
- Official Cisco Assessment Exams: Available through Cisco Learning Network
- Pearson VUE Practice Tests: Official practice exams available before scheduling the real exam
- Third-Party Practice Providers:
- ExamTopics - Free community-contributed exam questions and discussions
- ExamCollection - 300-720 SESA practice tests and study materials
- PrepAway - Full practice exam simulations with detailed explanations
- CertLibrary - Practice tests with performance tracking
- ITExams - Free practice questions and exam walkthroughs
Best Practice: Take multiple practice exams scoring 80%+ before scheduling your real exam attempt.
Books
- Cisco Email Security Appliance Documentation: Official Cisco product guides and administration manuals (free online)
- "Securing Email with Cisco Email Security Appliance: Practice Test Questions" - Available on Amazon and exam prep sites
- "CCNP Security Concentration Study Guide" - Covers SESA along with other security concentrations
- Cisco Learning Network Study Materials: Official Cisco learning modules and video tutorials
Note: The relative newness of the Secure Email Gateway platform means fewer legacy textbooks; most comprehensive study materials are available online through Cisco and training providers.
Job titles
Professionals earning the CCNP Security SESA certification typically pursue these roles:
- Email Security Engineer - Design and maintain enterprise email security infrastructure
- Security Administrator - Administer email security appliances and policies
- Email Systems Administrator - Manage Cisco ESA/SEG deployments and user support
- Network Security Specialist - Implement email security within broader network security strategy
- Information Security Analyst - Monitor and respond to email-based security threats
- Cloud Security Engineer - Manage hybrid email security (on-premises and cloud-based)
- Security Operations Center (SOC) Analyst - Investigate email security alerts and incidents
- Compliance Officer - Ensure email systems meet regulatory and compliance requirements
- Threat Intelligence Analyst - Analyze email-based threats and configure defenses
Salary (USD / ZAR / GBP / EUR / AUD)
Based on 2026 market data for email/messaging security professionals and Cisco security roles:
| Region | Salary Range | Notes |
|---|---|---|
| USD (United States) | $115,000 - $185,000 | Average ~$150K; senior roles $180K+ |
| ZAR (South Africa) | R1,800,000 - R3,000,000 | Conversion: USD × 18 (approximate) |
| GBP (United Kingdom) | £85,000 - £145,000 | Average ~£115K; London roles higher |
| EUR (Europe) | €95,000 - €160,000 | Average ~€125K; varies by country |
| AUD (Australia) | A$155,000 - A$250,000 | Average ~A$190K; Sydney/Melbourne premium |
Salary factors affecting compensation:
- Experience level (entry 3-5 years vs. senior 10+ years)
- Industry vertical (finance, healthcare, government premium)
- Organization size (enterprise vs. SMB)
- Geographic location (major metros command premiums)
- Additional certifications (CCNP, CISM, CISSP add 10-20%)
- Cloud email security expertise (Microsoft 365, Google Workspace)
Comparable Roles & Benchmarks:
- Network Security Engineer: $120K-$180K USD
- Information Security Analyst: $95K-$160K USD
- Security Operations Manager: $130K-$200K USD
- Cisco Security Software Engineer: $145K-$250K USD (varies by level)
Skills validated
The 300-720 SESA certification validates mastery of:
Technical Skills:
- Cisco Secure Email Gateway (ESA) architecture and operation
- Email protocol knowledge (SMTP, IMAP, POP3, LMTP)
- TLS/SSL encryption and certificate management
- LDAP and Active Directory integration
- Anti-spam technology and Talos reputation systems
- Antivirus and anti-malware configuration
- Data loss prevention (DLP) policy implementation
- Email routing and queue management
- Syslog and SNMP monitoring
- Disaster recovery and backup procedures
Security Skills:
- Threat identification and mitigation
- Email-based attack prevention (phishing, spoofing, BEC)
- Malware and ransomware protection
- Email encryption and secure communication
- Regulatory compliance (GDPR, HIPAA, CCPA)
- Security policy development and enforcement
- Incident response and forensics
- Log analysis and security auditing
Professional Skills:
- System troubleshooting and problem-solving
- Documentation and change management
- User communication and support
- Vendor ecosystem understanding
Related certs
Cisco CCNP Security Path:
- 350-701 SCOR (Cisco Certified Network Professional - Security Core exam)
- 300-710 SNCF (Securing Networks with Cisco Firewall)
- 300-715 SISE (Securing Internet of Things and ICS)
- 300-730 SVPN (Securing Networks with Cisco Secure VPN)
- 300-735 SESA (Securing Email with Cisco Email Security Appliance) ← This exam
- 300-740 SAFE (Security Architecture Framework Expert)
- 300-745 SWSA (Securing Wireless on Cisco Catalyst 9100 Series Access Points)
Related Specialist Certifications:
- Cisco Certified Specialist - Network Security
- Cisco Certified Specialist - Email Content Security (earned by passing 300-720)
- Cisco Certified Specialist - Firewall
- Cisco Certified Specialist - VPN
Adjacent Certification Paths:
- (ISC)² CISSP - Comprehensive security professional certification
- CompTIA Security+ - Foundation security knowledge
- Certified Information Security Manager (CISM)
- Certified Ethical Hacker (CEH)
- Offensive Security Certified Professional (OSCP)
Sources
Official Cisco Resources:
- Cisco 300-720 SESA Exam Details
- Cisco Learning Network - SESA Exam Topics
- Cisco CCNP Security Certification
Exam Registration & Delivery:
Study Materials & Practice:
- ExamTopics - 300-720 Free Questions
- Cisco Exam Syllabus - NWExam
- ExamCollection - 300-720 Practice Tests
Training & Preparation:
- CBT Nuggets - CCNP Security Training
- Global Knowledge - CCNP Security Training
- Udemy - CCNP SESA Exam Courses
Salary & Career Data:
- Cisco Security Engineer Salaries - Levels.fyi
- ZipRecruiter - Cisco Security Engineer Salary
- Indeed - Security Engineer Salary Data
Exam Cost & Details:
Important Notice: The 300-720 SESA exam is retiring on August 26, 2026. Candidates should plan to complete certification before this date or prepare for successor exam versions. Refer to Cisco's official channels for the latest updates on exam retirements and new exam releases.
Last updated: May 2, 2026