Cisco Cisco Email Security Appliance C390 사용자 가이드
Chapter 3 Tracking Email Messages
Enabling and Disabling Local Message Tracking
3-80
Cisco IronPort AsyncOS 7.3 for Email Daily Management Guide
OL-23080-01
Instead of having to search through log files using “grep” or similar tools, you can
use the flexible tracking interface to locate messages. You can use a variety of
search parameters in combination.
use the flexible tracking interface to locate messages. You can use a variety of
search parameters in combination.
Tracking queries can include:
•
Envelope information: Find messages from particular envelope senders or
recipients by entering the text strings to match.
recipients by entering the text strings to match.
•
Subject header: Match a text string in the subject line. Warning: Do not use
this type of search in environments where regulations prohibit such tracking.
this type of search in environments where regulations prohibit such tracking.
•
Time frame: Find a message that was sent between specified dates and times.
•
Sender IP address or rejected connections: Search for messages from a
particular IP address, or show rejected connections in the search results.
particular IP address, or show rejected connections in the search results.
•
Event Information: Find messages that match specified events, such as
messages flagged as virus positive, spam positive, or suspected spam, and
messages that were delivered, hard bounced, soft bounced, or sent to the
Virus Outbreak Quarantine.
messages flagged as virus positive, spam positive, or suspected spam, and
messages that were delivered, hard bounced, soft bounced, or sent to the
Virus Outbreak Quarantine.
•
Message ID: Find messages by identifying the SMTP “Message-ID:” header
or the IronPort message ID (MID).
or the IronPort message ID (MID).
Enabling and Disabling Local Message Tracking
To enable local message tracking:
Step 1
Click Services > Message Tracking.
The Message Tracking page is displayed.