Cisco Cisco Content Security Management Appliance M390 Guía Del Usuario
4-18
AsyncOS 10.0 for Cisco Content Security Management Appliances User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
Sender Profile Pages
When you click a sender in the Incoming Mail Details interactive table, on the Incoming Mail page, the
Sender Profile page appears. It shows detailed information about the particular IP address, domain, or
network owner (organization). You can access a Sender Profile page for any IP address, domain, or
network owner by clicking the corresponding link on the Incoming Mail page or on other Sender Profile
pages.
Sender Profile page appears. It shows detailed information about the particular IP address, domain, or
network owner (organization). You can access a Sender Profile page for any IP address, domain, or
network owner by clicking the corresponding link on the Incoming Mail page or on other Sender Profile
pages.
Network owners are entities that contain domains. Domains are entities that contain IP addresses.
The Sender Profile pages displayed for IP addresses, domains, and network owners vary slightly. For
each, the page contains a graph and summary table for incoming mail from the particular sender. Below
the graph, a table lists the domains or IP addresses associated with the sender. (The Sender Profile page
for an individual IP address does not contain a more granular listing.) The Sender Profile page also
includes an information section with the current SenderBase, sender group, and network information for
the sender.
each, the page contains a graph and summary table for incoming mail from the particular sender. Below
the graph, a table lists the domains or IP addresses associated with the sender. (The Sender Profile page
for an individual IP address does not contain a more granular listing.) The Sender Profile page also
includes an information section with the current SenderBase, sender group, and network information for
the sender.
•
Network Owner profile pages contain information for the network owner, as well as the domains and
IP addresses associated with that network owner.
IP addresses associated with that network owner.
•
Domain profile pages contain information for the domains and IP addresses associated with that
domain.
domain.
•
IP address profile pages contain information about the IP address only.
Each Sender Profile page contains the following data in the Current Information table at the bottom of
the page:
the page:
•
The global information from the SenderBase Reputation Service, including:
–
IP address, domain name, and/or network owner
–
Network owner category (network owner only)
–
CIDR range (IP addresses only)
–
Daily magnitude and monthly magnitude for the IP address, domain, and/or network owner
–
Days since the first message was received from this sender
–
Last sender group and whether DNS verified (IP address sender profile page only)
Daily magnitude is a measure of how many messages a domain has sent over the last 24 hours.
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of
message volume calculated using a log scale with a base of 10. The maximum theoretical value of
the scale is set to 10, which equates to 100% of the world's email message volume. Using the log
scale, a one-point increase in magnitude equates to a 10x increase in actual volume.
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of
message volume calculated using a log scale with a base of 10. The maximum theoretical value of
the scale is set to 10, which equates to 100% of the world's email message volume. Using the log
scale, a one-point increase in magnitude equates to a 10x increase in actual volume.
Monthly magnitude is calculated using the same approach as daily magnitude, except the
percentages are calculated based on the volume of email sent over the last 30 days.
percentages are calculated based on the volume of email sent over the last 30 days.
–
Average magnitude (IP addresses only)
–
Lifetime volume / 30 day volume (IP address profile pages only)
–
Bonded sender status (IP address profile pages only)
–
SenderBase Reputation Score (IP address profile pages only)
–
Days since first message (network owner and domain profile pages only)
–
Number of domains associated with this network owner (network owner and domain profile
pages only)
pages only)
–
Number of IP addresses in this network owner (network owner and domain profile pages only)