Cisco Cisco Email Security Appliance C390 사용자 가이드

The Internal Users page provides information about the mail sent and received by 
your internal users, per email address (a single user may have multiple email 
addresses listed — the email addresses are not combined in the report). 

The page consists of two sections: graphs depicting the top users by clean 
incoming and outgoing messages, and user mail flow details. You can select a time 
range on which to report (hour, day, week, or month). As with all reports, you can 
export the data for the graphs or the details listing to CSV format via the Export 
link.

The User Mail Flow Details listing breaks down the mail received and sent by 
each email address into Clean, Spam Detected (incoming only), Virus Detected, 
and Content Filter Matches. You can sort the listing by clicking on the column 
headers.

Using the Internal Users report, you can answer these kinds of questions:

Who is sending the most external email?

Who receives the most clean email?

Who receives the most spam?

Who is triggering which content filters?

Whose email is getting caught by content filters?

Inbound Internal Users are the users for which you received email, based on the 
Rcpt To: address. Outbound Internal Users are based on the Mail From: address 
and are useful when tracking the types of email that senders on your internal 
network are sending.

Note that some outbound mail (like bounces) have a null sender. They are counted 
under outbound and “unknown.”

Click on an internal user to view the Internal User detail page for that user. 

The Internal User detail page shows detailed information about the specified user, 
including a breakdown of incoming and outgoing messages showing the number 
of messages in each category (spam detected, virus detected, stopped by content 
filter, and clean). Incoming and outgoing content filter and DLP policy matches 
are also shown.