Cisco Cisco Content Security Management Appliance M1070 Guía Del Usuario
4-5
AsyncOS 8.3.7 for Cisco Content Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Working with Email Report Data
•
To print or export report information, see
•
To understand the various interactive report pages, see
.
•
To generate a report on demand, see
.
•
To schedule reports to run automatically at intervals and times that you specify, see
•
To view archived on-demand and scheduled reports, see
.
•
For background information,
•
To improve performance when working with large amounts of data, see
•
To get details about an entity or number that appears as a blue link in a chart or table, click the entity
or number.
or number.
For example, if your permissions allow you to do so, you can use this feature to view details about
messages that violate Content Filtering or Data Loss Prevention policies. This performs the relevant
search in Message Tracking. Scroll down to view results.
messages that violate Content Filtering or Data Loss Prevention policies. This performs the relevant
search in Message Tracking. Scroll down to view results.
Searching and the Interactive Email Report Pages
Many of the interactive email reporting pages include a ‘Search For:’ drop-down menu at the bottom of
the page.
the page.
From the drop-down menu, you can search for several types of criteria, including the following:
•
IP address
•
Domain
•
Network owner
•
Internal user
•
Destination domain
•
Internal sender domain
•
Internal sender IP address
•
Incoming TLS domain
•
Outgoing TLS domain
For most searches, choose whether to exactly match the search text or look for items starting with the
entered text (for example, starts with “ex” will match “example.com”).
entered text (for example, starts with “ex” will match “example.com”).
For IPv4 searches, the entered text is always interpreted as the beginning of up to four IP octets in dotted
decimal format. For example, ‘17’ will search in the range 17.0.0.0 through 17.255.255.255, so it will
match 17.0.0.1 but not 172.0.0.1. For an exact match search, enter all four octets. IP address searches
also support Classless Inter-Domain Routing (CIDR) format (17.16.0.0/12).
decimal format. For example, ‘17’ will search in the range 17.0.0.0 through 17.255.255.255, so it will
match 17.0.0.1 but not 172.0.0.1. For an exact match search, enter all four octets. IP address searches
also support Classless Inter-Domain Routing (CIDR) format (17.16.0.0/12).
For IPv6 searches, you can enter addresses using the formats in the following examples:
•
2001:db8:2004:4202::0-2001:db8:2004:4202::ff
•
2001:db8:2004:4202::
•
2001:db8:2004:4202::23