Cisco Cisco Content Security Management Appliance M1070 Guía Del Usuario
4-13
Cisco IronPort AsyncOS 8.0 for Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Following these rules, if a message is marked as spam positive, and your anti-spam settings are set to
drop spam positive messages, the message is dropped and the spam counter is incremented.
drop spam positive messages, the message is dropped and the spam counter is incremented.
Further, if your anti-spam settings are set to let the spam positive message continue on in the email
pipeline, and a subsequent content filter drops, bounces, or quarantines the message, the spam count is
still incremented. The content filter count is only incremented if the message is not spam or virus
positive.
pipeline, and a subsequent content filter drops, bounces, or quarantines the message, the spam count is
still incremented. The content filter count is only incremented if the message is not spam or virus
positive.
Categorizing Email Messages on Overview Page
Messages reported on the Overview page are categorized as follows:
Table 4-4
Email Categories on Overview Page
Category
Description
Stopped by Reputation Filtering
All connections blocked by HAT policies multiplied by a
fixed multiplier (see the
fixed multiplier (see the
) plus all recipients blocked by
recipient throttling.
The Stopped by Reputation Filtering total on the Overview
page is always based on a complete count of all rejected
connections. Only the per-sender connection counts are
limited due to load.
page is always based on a complete count of all rejected
connections. Only the per-sender connection counts are
limited due to load.
Invalid Recipients
All mail recipients rejected by conversational LDAP
rejection plus all RAT rejections.
rejection plus all RAT rejections.
Spam Messages Detected
The total count of messages detected by the anti-spam
scanning engine as positive or suspect. Additionally,
messages that are both spam and virus positive.
scanning engine as positive or suspect. Additionally,
messages that are both spam and virus positive.
Virus Messages Detected
The total count and percentage of messages detected as virus
positive and not also spam.
positive and not also spam.
Stopped by Content Filter
The total count of messages that were stopped by a content
filter.
filter.
Marketing Messages
The total count and percentage of messages detected as
unwanted marketing messages. This list item appears on the
page only if marketing data are present in the system.
unwanted marketing messages. This list item appears on the
page only if marketing data are present in the system.
Clean Messages Accepted
This category is mail that is accepted and deemed to be virus
and spam free.
and spam free.
The most accurate representation of clean messages accepted
when taking per-recipient scanning actions (such as
splintered messages being processed by separate mail
policies) into account.
when taking per-recipient scanning actions (such as
splintered messages being processed by separate mail
policies) into account.
However, because messages that are marked as spam or virus
positive and still delivered are not counted, the actual number
of messages delivered may differ from the clean message
count.
positive and still delivered are not counted, the actual number
of messages delivered may differ from the clean message
count.
If messages match a message filter and are not dropped or
bounced by the filter, they are treated as clean. Messages
dropped or bounced by a message filter are not counted in the
totals.
bounced by the filter, they are treated as clean. Messages
dropped or bounced by a message filter are not counted in the
totals.