Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
4-9
AsyncOS 8.3 for Cisco Content Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
Table Column Descriptions for Email Reporting Pages
Table 4-2
Table Column Descriptions for Email Reporting Pages
Column Name
Description
Incoming Mail Details
Connections Rejected
All connections blocked by HAT policies. When the appliance is
under heavy load, an exact count of rejected connections is not
maintained on a per-sender basis. Instead, rejected connections
counts are maintained only for the most significant senders in each
time interval.
under heavy load, an exact count of rejected connections is not
maintained on a per-sender basis. Instead, rejected connections
counts are maintained only for the most significant senders in each
time interval.
Connections Accepted
All connections accepted,
Total Attempted
All accepted and blocked connections attempted.
Stopped by Recipient Throttling This is a component of Stopped by Reputation Filtering. It
represents the number of recipient messages stopped because any of
the following HAT limits have been exceeded: maximum recipients
per hour, maximum recipients per message, or maximum messages
per connection. This is summed with an estimate of the recipient
messages associated with rejected or TCP refused connections to
yield Stopped by Reputation Filtering.
the following HAT limits have been exceeded: maximum recipients
per hour, maximum recipients per message, or maximum messages
per connection. This is summed with an estimate of the recipient
messages associated with rejected or TCP refused connections to
yield Stopped by Reputation Filtering.
Stopped by Reputation Filtering
The value for Stopped by Reputation Filtering is calculated based
on several factors:
on several factors:
•
Number of “throttled” messages from this sender
•
Number of rejected or TCP refused connections (may be a
partial count)
partial count)
•
A conservative multiplier for the number of messages per
connection
connection
When the appliance is under heavy load, an exact count of rejected
connections is not maintained on a per-sender basis. Instead,
rejected connections counts are maintained only for the most
significant senders in each time interval. In this situation, the value
shown can be interpreted as a “floor”; that is, at least this many
messages were stopped.
connections is not maintained on a per-sender basis. Instead,
rejected connections counts are maintained only for the most
significant senders in each time interval. In this situation, the value
shown can be interpreted as a “floor”; that is, at least this many
messages were stopped.
Note
The Stopped by Reputation Filtering total on the Overview
page is always based on a complete count of all rejected
connections. Only the per-sender connection counts are
limited due to load.
page is always based on a complete count of all rejected
connections. Only the per-sender connection counts are
limited due to load.
Stopped as Invalid Recipients
All mail recipients rejected by conversational LDAP rejection plus
all RAT rejections.
all RAT rejections.
Spam Detected
Any spam that has been detected.
Virus Detected
Any viruses that have been detected
Stopped by Content Filter
The total count of messages that were stopped by a content filter.