From 5d1bca235654ea8deb5678d2b1d207617df07b3b Mon Sep 17 00:00:00 2001
From: eli sharf <57587340+esharf@users.noreply.github.com>
Date: Sun, 23 Jul 2023 12:23:05 +0300
Subject: [PATCH] fix Cisco ESA fetch key error (#28172)

---
 .../CiscoEmailSecurityApplianceIronPortV2.py                | 2 +-
 Packs/IronPort/ReleaseNotes/2_0_13.md                       | 6 ++++++
 Packs/IronPort/pack_metadata.json                           | 2 +-
 3 files changed, 8 insertions(+), 2 deletions(-)
 create mode 100644 Packs/IronPort/ReleaseNotes/2_0_13.md

diff --git a/Packs/IronPort/Integrations/CiscoEmailSecurityApplianceIronPortV2/CiscoEmailSecurityApplianceIronPortV2.py b/Packs/IronPort/Integrations/CiscoEmailSecurityApplianceIronPortV2/CiscoEmailSecurityApplianceIronPortV2.py
index 460ab9a270ee..3f3ca293db4e 100755
--- a/Packs/IronPort/Integrations/CiscoEmailSecurityApplianceIronPortV2/CiscoEmailSecurityApplianceIronPortV2.py
+++ b/Packs/IronPort/Integrations/CiscoEmailSecurityApplianceIronPortV2/CiscoEmailSecurityApplianceIronPortV2.py
@@ -1746,7 +1746,7 @@ def fetch_incidents(
     )
     end_date = format_datetime("now")
     quarantine_type = QUARANTINE_TYPE
-    offset = last_run.pop("offset", 0)
+    offset = last_run.pop("offset", 0) or 0
     order_by = "date"
     order_dir = "asc"
 
diff --git a/Packs/IronPort/ReleaseNotes/2_0_13.md b/Packs/IronPort/ReleaseNotes/2_0_13.md
new file mode 100644
index 000000000000..b6c7f810fa44
--- /dev/null
+++ b/Packs/IronPort/ReleaseNotes/2_0_13.md
@@ -0,0 +1,6 @@
+
+#### Integrations
+
+##### Cisco ESA
+
+- Fixed an issue that caused the fetch to fail when the previous incidents to fetch exceeded the maximum allowed size.
diff --git a/Packs/IronPort/pack_metadata.json b/Packs/IronPort/pack_metadata.json
index 452b5b658041..2d25723b72ac 100644
--- a/Packs/IronPort/pack_metadata.json
+++ b/Packs/IronPort/pack_metadata.json
@@ -2,7 +2,7 @@
     "name": "Cisco Email Security Appliance (IronPort)",
     "description": "Cisco Email Security protects against ransomware, business email compromise, spoofing, and phishing",
     "support": "xsoar",
-    "currentVersion": "2.0.12",
+    "currentVersion": "2.0.13",
     "author": "Cortex XSOAR",
     "url": "https://www.paloaltonetworks.com/cortex",
     "email": "",