Cisco Cisco Content Security Management Appliance M160 Guía Del Usuario
4-12
AsyncOS 8.3 for Cisco Content Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
Alternately, if the message were quarantined by Outbreak Filters, it would not be counted until it was
released from the quarantine and again processed through the work queue.
released from the quarantine and again processed through the work queue.
For complete information about message processing precedence, see chapter about the email pipeline in
the online help or user guide for your Email Security appliance.
the online help or user guide for your Email Security appliance.
Categorizing Email Messages on the Overview Page
Messages reported on the Overview page are categorized as follows:
Table 4-4
Email Categories on Overview Page
Category
Description
Stopped by
Reputation Filtering
Reputation Filtering
All connections blocked by HAT policies multiplied by a fixed multiplier
(see the
(see the
)
plus all recipients blocked by recipient throttling.
The Stopped by Reputation Filtering total on the Overview page is always
based on a complete count of all rejected connections. Only the per-sender
connection counts are limited due to load.
based on a complete count of all rejected connections. Only the per-sender
connection counts are limited due to load.
Invalid Recipients
All mail recipients rejected by conversational LDAP rejection plus all RAT
rejections.
rejections.
Spam Messages
Detected
Detected
The total count of messages detected by the anti-spam scanning engine as
positive or suspect. Additionally, messages that are both spam and virus
positive.
positive or suspect. Additionally, messages that are both spam and virus
positive.
Virus Messages
Detected
Detected
The total count and percentage of messages detected as virus positive and not
also spam.
also spam.
The following messages are counted in the “Virus Detected” category:
•
Messages with a virus scan result of “Repaired” or “Infectious”
•
Messages with a virus scan result of “Encrypted” when the the option to
count encrypted messages as containing viruses is selected
count encrypted messages as containing viruses is selected
•
Messages with a virus scan result of “Unscannable” when the action for
unscannable messages is NOT “Deliver”
unscannable messages is NOT “Deliver”
•
Messages with a virus scan result of “Unscannable” or “Encrypted”
when the option to deliver to an alternate mail host or an alternate
recipient is selected
when the option to deliver to an alternate mail host or an alternate
recipient is selected
•
Messages that are deleted from the Outbreak quarantine, either manually
or by timing out.
or by timing out.
Stopped by Content
Filter
Filter
The total count of messages that were stopped by a content filter.
Stopped by DMARC
The total count of messages that failed DMARC verification.