Cisco Cisco Email Security Appliance C190 Guía Del Usuario
7-8
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 7 Reputation Filtering
Repeat steps 2-5 for each group in the listener’s HAT. For example, define the values for
conservative approach. You can configure the values shown in
conservative approach. You can configure the values shown in
for a moderate or
aggressive approach as well.
Note
Remember that order matters when defining sender groups in a listener’s HAT. (The HAT is read
from top to bottom for each host that attempts to connect to the listener. If a rule matches a
connecting host, the action is taken for that connection immediately.) Cisco recommends
maintaining the default order of the predefined sender groups in a listener’s HAT — that is,
RELAYLIST (C10/100 customers only), followed by WHITELIST, BLACKLIST,
SUSPECTLIST, and UNKNOWNLIST.
from top to bottom for each host that attempts to connect to the listener. If a rule matches a
connecting host, the action is taken for that connection immediately.) Cisco recommends
maintaining the default order of the predefined sender groups in a listener’s HAT — that is,
RELAYLIST (C10/100 customers only), followed by WHITELIST, BLACKLIST,
SUSPECTLIST, and UNKNOWNLIST.
Step 5
Click the Commit Changes button, add an optional comment if necessary, and then click Commit
Changes to finish implementing reputation filtering in a listener’s HAT.
Changes to finish implementing reputation filtering in a listener’s HAT.
Testing Reputation Filtering Using the SBRS
Unless you regularly receive a large portion of spam, or you have set up “dummy” accounts to
specifically receive spam for your organization, it may be difficult to immediately test the SBRS policies
you have implemented. However, if you add entries for reputation filtering with SenderBase Reputation
Scores into a listener’s HAT as indicated in
specifically receive spam for your organization, it may be difficult to immediately test the SBRS policies
you have implemented. However, if you add entries for reputation filtering with SenderBase Reputation
Scores into a listener’s HAT as indicated in
, you will notice that a smaller percentage of
inbound mail will be “unclassified.”
Sender Group
SBRS Range
Mail Flow Policy
WHITELIST
6 to 10
TRUSTED
BLACKLIST
-10 to -7
BLOCKED
SUSPECTLIST
-7 to -2
THROTTLED
UNKOWNLIST
-2 to 6
ACCEPTED