Cisco Cisco Content Security Management Appliance M1070 User Guide
6-2
AsyncOS 8.3 for Cisco Content Security Management User Guide
Chapter 6 Tracking Email Messages
Setting Up Centralized Message Tracking
Some attachments may not be tracked. For performance reasons, scanning of attachment names
occurs only as part of other scanning operations, for example message or content filtering, DLP, or
disclaimer stamping. Attachment names are available only for messages that pass through body
scanning while the attachment is still attached. Some examples when an attachment name will not
appear include (but are not limited to):
occurs only as part of other scanning operations, for example message or content filtering, DLP, or
disclaimer stamping. Attachment names are available only for messages that pass through body
scanning while the attachment is still attached. Some examples when an attachment name will not
appear include (but are not limited to):
–
if the system only uses content filters, and a message is dropped or its attachment is stripped by
anti-spam or anti-virus filters
anti-spam or anti-virus filters
–
if message splintering policies strip the attachment from some messages before body scanning
occurs.
occurs.
•
Event: Find messages that match specified events, such as messages flagged as virus positive, spam
positive, or suspected spam, and messages that were delivered, hard bounced, soft bounced, or sent
to the Virus Outbreak Quarantine.
positive, or suspected spam, and messages that were delivered, hard bounced, soft bounced, or sent
to the Virus Outbreak Quarantine.
•
Message ID: Find messages by identifying the SMTP “Message-ID:” header or the Cisco IronPort
message ID (MID).
message ID (MID).
•
Email Security appliance (host): Narrow search criteria to particular Email Security appliances,
or search across all managed appliances.
or search across all managed appliances.
Setting Up Centralized Message Tracking
To set up centralized message tracking, complete the following procedures in order:
•
•
•
Enabling Centralized Email Tracking on a Security Management Appliance
Procedure
Step 1
On the Security Management appliance, choose Management Appliance > Centralized Services >
Email> Centralized Message Tracking.
Email> Centralized Message Tracking.
Step 2
In the Message Tracking Service section, click Enable.
Step 3
If you are enabling centralized email tracking for the first time after running the System Setup Wizard,
review the end user license agreement, and click Accept.
review the end user license agreement, and click Accept.
Step 4
Submit and commit your changes.
Configuring Centralized Message Tracking on Email Security Appliances
Procedure
Step 1
Verify that Message Tracking is configured and working properly on the Email Security appliance.