Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
4-33
AsyncOS 9.5.2 for Cisco Content Security Management Appliances User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
Inbound SMTP Authentication Page
The Inbound SMTP Authentication page shows the use of client certificates and the SMTP AUTH
command to authenticate SMTP sessions between the Email Security appliance and users’ mail clients.
If the appliance accepts the certificate or SMTP AUTH command, it will establish a TLS connection to
the mail client, which the client will use to send a message. Since it is not possible for the appliance to
track these attempts on a per-user basis, the report shows details on SMTP authentication based on the
domain name and domain IP address.
command to authenticate SMTP sessions between the Email Security appliance and users’ mail clients.
If the appliance accepts the certificate or SMTP AUTH command, it will establish a TLS connection to
the mail client, which the client will use to send a message. Since it is not possible for the appliance to
track these attempts on a per-user basis, the report shows details on SMTP authentication based on the
domain name and domain IP address.
Use this report to determine the following information:
•
Overall, how many incoming connection use SMTP authentication?
•
How many connections use a client certificated?
•
How many connections use SMTP AUTH?
•
What domains are failing to connect when attempting to use SMTP authentication?
•
How many connections are successfully using the fall-back when SMTP authentication fails?
The Inbound SMTP Authentication page includes a graph for received connections, a graph for mail
recipients who attempted an SMTP authentication connection, and a table with details on the attempts
to authenticate connections.
recipients who attempted an SMTP authentication connection, and a table with details on the attempts
to authenticate connections.
The Received Connections graph shows the incoming connections from mail clients that attempt to
authentication their connections using SMTP authentication over the time range you specify. The graph
displays the total number of connections the appliance received, the number that did not attempt to
authentication their connections using SMTP authentication over the time range you specify. The graph
displays the total number of connections the appliance received, the number that did not attempt to
Incoming TLS Connections Details
The table displays details for domains sending or receiving
encrypted messages. For each domain, you can view the total
number of connections, messages sent, and the number of
TLS connections that were successful or failed. You can also
view the percentage of successful and failed connections for
each domain.
encrypted messages. For each domain, you can view the total
number of connections, messages sent, and the number of
TLS connections that were successful or failed. You can also
view the percentage of successful and failed connections for
each domain.
Outgoing TLS Connections Graph
The graph displays a view of outgoing TLS encrypted and
unencrypted connections over the last hour, day, or week
depending on the time frame that you have selected.
unencrypted connections over the last hour, day, or week
depending on the time frame that you have selected.
Outgoing TLS Connections Summary
This table displays the total volume of outgoing messages, the
volume of encrypted and unencrypted messages, and the
volume of successful and failed outgoing TLS encrypted
messages.
volume of encrypted and unencrypted messages, and the
volume of successful and failed outgoing TLS encrypted
messages.
Outgoing TLS Message Summary
This table shows the total volume of outgoing messages
Outgoing TLS Connections Details
The table displays details for domains sending or receiving
encrypted messages. For each domain, you can view the total
number of connections, messages sent, and the number of
TLS connections that were successful or failed, and the last
TLS status. You can also view the percentage of successful
and failed connections for each domain.
encrypted messages. For each domain, you can view the total
number of connections, messages sent, and the number of
TLS connections that were successful or failed, and the last
TLS status. You can also view the percentage of successful
and failed connections for each domain.
Table 4-10
Details on the Email > Reporting > TLS Connections Page
Section
Description