Cisco Cisco Email Security Appliance C390 사용자 가이드

For any given email sender for incoming mail, the Email Security Monitor 
database captures critical parameters such as: 

Message volume 

Connection history 

Accepted vs. rejected connections

Acceptance rates and throttle limits 

Reputation filter matches

Number of anti-spam messages for suspected spam and positively identified 
spam

Number of virus-positive message detected by anti-virus scanning

See the “Anti-Spam” chapter in the Cisco IronPort AsyncOS Configuration Guide 
for more information on Anti-Spam scanning and the “Anti-Virus” chapter in the 
Cisco IronPort AsyncOS Configuration Guide for more information on anti-virus 
scanning.

The Email Security Monitor feature also captures information on which content 
filter a particular message triggers, including the internal user (email recipient) to 
or from which the message was sent.

The Email Security Monitor feature is available in the GUI only, and provides a 
view into your email traffic and the status of your IronPort appliance (including 
quarantines, work queues, and virus outbreaks). The appliance identifies when a 
sender falls outside of the normal traffic profile. Senders that do are highlighted 
in the interface, allowing you to take corrective action by assigning that sender to 
a sender group or refining the access profile of the sender; or, you can let 
AsyncOS’s security services continue to react and respond. Outbound mail has a 
similar monitoring capability, providing you a view into the top domains in the 
mail queue and the status of receiving hosts (see 

).