Cisco Cisco Email Security Appliance C190 Guía Del Usuario
29-5
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 29 Tracking Messages
Working with Message Tracking Search Results
Message Details
Item Description
Envelope and Header Summary section:
Received Time
Time that the Email Security appliance received the message.
Dates and times are displayed using the local time configured on the Email
Security appliance.
Security appliance.
MID
Unique IronPort message ID.
Message Size
Message size.
Subject
Subject line of the message.
The subject line in the tracking results may have the value “(No Subject)” if the
message does not have a subject, or if log files are not configured to record
subject headers. For more information, see
message does not have a subject, or if log files are not configured to record
subject headers. For more information, see
Envelope Sender
Address of the sender in the SMTP envelope.
Envelope
Recipients
Recipients
If your deployment uses the alias table for alias expansion, the search finds the
expanded recipient addresses rather than the original envelope addresses. For
more information about Alias Tables, see “Creating Alias Tables” in the
“Configuring Routing and Delivery Features” chapter .
expanded recipient addresses rather than the original envelope addresses. For
more information about Alias Tables, see “Creating Alias Tables” in the
“Configuring Routing and Delivery Features” chapter .
In all other cases, message tracking queries find the original envelope recipient
addresses.
addresses.
Message ID
Header
Header
The RFC 822 message header.
SMTP Auth User
ID
ID
SMTP authenticated username of the sender, if the sender used SMTP
authentication to send the message. Otherwise, the value is “N/A.”
authentication to send the message. Otherwise, the value is “N/A.”
Attachments
The names of files attached to the message.
Messages that contain at least one attachment with the queried name will appear
in the search results.
in the search results.
Some attachments may not be tracked. For performance reasons, scanning of
attachment names occurs only as part of other scanning operations, for example
message or content filtering, DLP, or disclaimer stamping. Attachment names are
available only for messages that pass through body scanning while the
attachment is still attached. Situations in which an attachment name will not
appear in search results include (but are not limited to):
attachment names occurs only as part of other scanning operations, for example
message or content filtering, DLP, or disclaimer stamping. Attachment names are
available only for messages that pass through body scanning while the
attachment is still attached. Situations in which an attachment name will not
appear in search results include (but are not limited to):
•
if the system only uses content filters, and a message is dropped or its
attachment is stripped by anti-spam or anti-virus filters
attachment is stripped by anti-spam or anti-virus filters
•
if message splintering policies strip the attachment from some messages
before body scanning occurs.
before body scanning occurs.
For performance reasons, the names of files within attachments, such as OLE
objects or archives such as .ZIP files, are not searched.
objects or archives such as .ZIP files, are not searched.
Sending Host Summary section
Reverse DNS
Hostname
Hostname
Name of the sending host, as verified by reverse DNS (PTR) lookup.
IP Address
IP address of the sending host.