Cisco Cisco Email Security Appliance C190 Guía Del Usuario
27-13
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 27 Using Email Security Monitor
Email Security Monitor Pages
–
CIDR Range (IP addresses only)
–
Daily Magnitude and Monthly Magnitude for the IP address, Domain, and/or Network Owner
–
Days since the first message was received from this sender
–
Last sender group and whether DNS verified (IP Address sender profile page only)
Daily magnitude is a measure of how many messages a domain has sent over the last 24 hours.
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of
message volume calculated using a log scale with a base of 10. The maximum theoretical value of
the scale is set to 10, which equates to 100% of the world's email message volume (approximately
10 billion messages/day). Using the log scale, a one-point increase in magnitude equates to a 10x
increase in actual volume.
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of
message volume calculated using a log scale with a base of 10. The maximum theoretical value of
the scale is set to 10, which equates to 100% of the world's email message volume (approximately
10 billion messages/day). Using the log scale, a one-point increase in magnitude equates to a 10x
increase in actual volume.
Monthly magnitude is calculated using the same approach as daily magnitude, except the
percentages are calculated based on the volume of email sent over the last 30 days.
percentages are calculated based on the volume of email sent over the last 30 days.
–
Average Magnitude (IP addresses only)
–
Lifetime Volume / 30 Day Volume (IP address profile pages only)
–
Bonded Sender Status (IP address profile pages only)
–
SenderBase Reputation Score (IP address profile pages only)
–
Days Since First Message (network owner and domain profile pages only)
–
Number of Domains Associated with this Network Owner (network owner and domain profile
pages only)
pages only)
–
Number of IP Addresses in this Network Owner (network owner and domain profile pages only)
–
Number of IP Addresses used to Send Email (network owner pages only)
Click the “More from SenderBase” link to see a page with all information supplied by the
SenderBase Reputation Service.
SenderBase Reputation Service.
•
The Mail Flow Statistics information, with Email Security Monitor information collected about the
sender over the time range that you specify.
sender over the time range that you specify.
•
Details about the domains and IP addresses controlled by this network owner are displayed on
network owner profile pages. Details about the IP addresses in the domain are displayed on domain
pages.
network owner profile pages. Details about the IP addresses in the domain are displayed on domain
pages.
From a domain profile page, you can drill down to a specific IP address, or drill up to view an
organization profile page. You can also display the DNS Verified status, SBRS (SenderBase Reputation
Score), and Last Sender Group for each sender address in the IP Addresses table by clicking the Columns
link at the bottom of that table. You can also hide any columns in that table.
organization profile page. You can also display the DNS Verified status, SBRS (SenderBase Reputation
Score), and Last Sender Group for each sender address in the IP Addresses table by clicking the Columns
link at the bottom of that table. You can also hide any columns in that table.
From a network owner profile page, you can display information such as Connections Rejected,
Connections Accepted, Stopped by Recipient Throttling, and Detected by Advanced Malware Protection
for each domain in the Domains table by clicking the Columns link at the bottom of that table. You can
also hide any columns in that table.
Connections Accepted, Stopped by Recipient Throttling, and Detected by Advanced Malware Protection
for each domain in the Domains table by clicking the Columns link at the bottom of that table. You can
also hide any columns in that table.
If you are an administrator of the system, on each of these pages, you can choose to add the network
owner, domain, or IP address to a sender group by clicking the check box for the entity (if necessary)
and then clicking Add to Sender Group.
owner, domain, or IP address to a sender group by clicking the check box for the entity (if necessary)
and then clicking Add to Sender Group.
You can also add a sender to a sender group by clicking the Add to Sender Group link below the Sender
Group Information in the Current Information table for the sender and clicking Add to Sender Group.
For more information about adding senders to sender groups, see
Group Information in the Current Information table for the sender and clicking Add to Sender Group.
For more information about adding senders to sender groups, see
. Of course, you do not have to make any changes — you can let the security services
handle incoming mail.