Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Page de 432
 
4-16
AsyncOS 9.5.2 for Cisco Content Security Management Appliances User Guide
 
Chapter 4      Using Centralized Email Security Reporting
  Understanding the Email Reporting Pages
See detailed statistics on senders that have sent mail to your appliances. The statistics include the 
number of attempted messages broken down by security service (sender reputation filtering, 
anti-spam, anti-virus, and so forth). 
Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam 
or anti-virus security services.
Use the SenderBase Reputation Service to examine the relationship between specific IP addresses, 
domains, and organizations to obtain information about a sender. 
Obtain more information about a sender from the SenderBase Reputation Service, including a 
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most 
recently. Add senders to sender groups.
Obtain more information about a specific sender who has sent a high volume of spam or virus email, 
as determined by the anti-spam or anti-virus security services.
Views Within the Incoming Mail Page
The Incoming Mail page has three different views: 
IP Addresses
Domains
Network Owners 
These views provide a snapshot of the remote hosts connecting to the system in the context of the 
selected view.
Additionally, in the Incoming Mail Details section of the Incoming Mail Page, you can click on a 
Sender’s IP Address, Domain name, or Network Owner Information to retrieve specific Sender Profile 
Information. For more information on Sender Profile information, see the 
.
Note
Network owners are entities that contain domains. Domains are entities that contain IP addresses.
Depending on the view you select, the Incoming Mail Details interactive table displays the top IP 
addresses, domains, or network owners that have sent mail to all public listeners configured on the Email 
Security appliances. You can monitor the flow of all mail into your appliances. 
Click an IP address, domain, or network owner to access details about the sender on the Sender Profile 
page. The Sender Profile page is an Incoming Mail page that is specific to a particular IP address, 
domain, or network owner.
To access the mail flow information by sender group, click the Sender Groups Report link at the bottom 
of the Incoming Mail page. See 
In some cases, some of the report pages contain several unique sub-reports that can be accessed from the 
top-level page. For example, the Incoming Mail report page on the Security Management appliance 
allows you to see information for individual IP Addresses, Domains and Network Owners. Each of these 
are sub-pages are accessed from the Incoming Mail report page. 
Results for each of these sub-report pages are generated on one consolidated report when you click on 
the Printable PDF link at the top-right of the top-level page; in this case the Incoming Mail report page. 
See important information in 
The Email > Reporting > Incoming Mail page offers the following views: IP AddressesDomains, or 
Network Owners