Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Page de 402
 
4-15
AsyncOS 8.3 for Cisco Content Security Management User Guide
 
Chapter 4      Using Centralized Email Security Reporting
  Understanding the Email Reporting Pages
Categorizing Email Messages on Incoming Mail Page
Messages reported on the Incoming Mail page are categorized as follows:
Table 4-5
Email Categories on Incoming Mail Page
Category
Description
Stopped by Reputation Filtering
All connections blocked by HAT policies multiplied by a 
fixed multiplier (see the 
) plus all recipients blocked by 
recipient throttling.
The value for Stopped by Reputation Filtering is calculated 
based on several factors:
Number of “throttled” messages from this sender
Number of rejected or TCP refused connections (may be 
a partial count)
A conservative multiplier for the number of messages per 
connection
When the appliance is under heavy load, an exact count of 
rejected connections is not maintained on a per-sender basis. 
Instead, rejected connections counts are maintained only for 
the most significant senders in each time interval. In this 
situation, the value shown can be interpreted as a “floor”; that 
is, at least this many messages were stopped. 
Invalid Recipients
All mail recipients rejected by conversational LDAP 
rejection plus all RAT rejections.
Spam Messages Detected
The total count of messages detected by the anti-spam 
scanning engine as positive or suspect. Additionally, 
messages that are both spam and virus positive.
Virus Messages Detected
The total count and percentage of messages detected as virus 
positive and not also spam.
Stopped by Content Filter
The total count of messages that were stopped by a content 
filter. 
If your access privileges allow you to view Message Tracking 
data: To view Message Tracking details for the Content Filter 
violations in this report, click a blue number link in the table. 
Stopped by DMARC
The total count of messages that failed DMARC verification.