Cisco Cisco Content Security Management Appliance M160 Guía Del Usuario
4-16
AsyncOS 9.5.2 for Cisco Content Security Management Appliances User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
•
See detailed statistics on senders that have sent mail to your appliances. The statistics include the
number of attempted messages broken down by security service (sender reputation filtering,
anti-spam, anti-virus, and so forth).
number of attempted messages broken down by security service (sender reputation filtering,
anti-spam, anti-virus, and so forth).
•
Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam
or anti-virus security services.
or anti-virus security services.
•
Use the SenderBase Reputation Service to examine the relationship between specific IP addresses,
domains, and organizations to obtain information about a sender.
domains, and organizations to obtain information about a sender.
•
Obtain more information about a sender from the SenderBase Reputation Service, including a
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most
recently. Add senders to sender groups.
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most
recently. Add senders to sender groups.
•
Obtain more information about a specific sender who has sent a high volume of spam or virus email,
as determined by the anti-spam or anti-virus security services.
as determined by the anti-spam or anti-virus security services.
Views Within the Incoming Mail Page
The Incoming Mail page has three different views:
•
IP Addresses
•
Domains
•
Network Owners
These views provide a snapshot of the remote hosts connecting to the system in the context of the
selected view.
selected view.
Additionally, in the Incoming Mail Details section of the Incoming Mail Page, you can click on a
Sender’s IP Address, Domain name, or Network Owner Information to retrieve specific Sender Profile
Information. For more information on Sender Profile information, see the
Sender’s IP Address, Domain name, or Network Owner Information to retrieve specific Sender Profile
Information. For more information on Sender Profile information, see the
.
Note
Network owners are entities that contain domains. Domains are entities that contain IP addresses.
Depending on the view you select, the Incoming Mail Details interactive table displays the top IP
addresses, domains, or network owners that have sent mail to all public listeners configured on the Email
Security appliances. You can monitor the flow of all mail into your appliances.
addresses, domains, or network owners that have sent mail to all public listeners configured on the Email
Security appliances. You can monitor the flow of all mail into your appliances.
Click an IP address, domain, or network owner to access details about the sender on the Sender Profile
page. The Sender Profile page is an Incoming Mail page that is specific to a particular IP address,
domain, or network owner.
page. The Sender Profile page is an Incoming Mail page that is specific to a particular IP address,
domain, or network owner.
To access the mail flow information by sender group, click the Sender Groups Report link at the bottom
of the Incoming Mail page. See
of the Incoming Mail page. See
In some cases, some of the report pages contain several unique sub-reports that can be accessed from the
top-level page. For example, the Incoming Mail report page on the Security Management appliance
allows you to see information for individual IP Addresses, Domains and Network Owners. Each of these
are sub-pages are accessed from the Incoming Mail report page.
top-level page. For example, the Incoming Mail report page on the Security Management appliance
allows you to see information for individual IP Addresses, Domains and Network Owners. Each of these
are sub-pages are accessed from the Incoming Mail report page.
Results for each of these sub-report pages are generated on one consolidated report when you click on
the Printable PDF link at the top-right of the top-level page; in this case the Incoming Mail report page.
See important information in
the Printable PDF link at the top-right of the top-level page; in this case the Incoming Mail report page.
See important information in
.
The Email > Reporting > Incoming Mail page offers the following views: IP Addresses, Domains, or
Network Owners
Network Owners