Your Cisco Content Security Management appliance shows aggregated information from individual or
multiple Email Security appliances so that you can monitor your email traffic patterns and security risks.
You can run reports in real-time to view an interactive display of system activity over a specific period
of time, or you can schedule reports and run them at regular intervals. Reporting functionality also allows
you to export raw data to a file.

This feature centralizes the reports listed under the Monitor menu of the Email Security appliance.

The Centralized Email Reporting feature not only generates high-level reports, allowing you to
understand what is happening on their network, but it also allows you to drill down and see traffic details
for a particular domain, user, or category.

The Centralized Tracking feature allows you to track email messages that traverse multiple Email
Security appliances.

Note

The Email Security appliance only stores data if local reporting is used. If centralized reporting is
enabled for the Email Security appliance then the Email Security appliance does NOT retain any
reporting data except for System Capacity and System Status. If Centralized Email Reporting is not
enabled, the only reports that are generated are System Status and System Capacity.

For more information about availability of report data during and after the transition to centralized
reporting, see the “Centralized Reporting Mode” section of the documentation or online help for your
Email Security appliance.