Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
4-18
AsyncOS 8.3 for Cisco Content Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
•
IP address profile pages contain information about the IP address only.
Each Sender Profile page contains the following data in the Current Information table at the bottom of
the page:
the page:
•
The global information from the SenderBase Reputation Service, including:
–
IP address, domain name, and/or network owner
–
Network owner category (network owner only)
–
CIDR range (IP addresses only)
–
Daily magnitude and monthly magnitude for the IP address, domain, and/or network owner
–
Days since the first message was received from this sender
–
Last sender group and whether DNS verified (IP address sender profile page only)
Daily magnitude is a measure of how many messages a domain has sent over the last 24 hours.
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of
message volume calculated using a log scale with a base of 10. The maximum theoretical value of
the scale is set to 10, which equates to 100% of the world's email message volume. Using the log
scale, a one-point increase in magnitude equates to a 10x increase in actual volume.
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of
message volume calculated using a log scale with a base of 10. The maximum theoretical value of
the scale is set to 10, which equates to 100% of the world's email message volume. Using the log
scale, a one-point increase in magnitude equates to a 10x increase in actual volume.
Monthly magnitude is calculated using the same approach as daily magnitude, except the
percentages are calculated based on the volume of email sent over the last 30 days.
percentages are calculated based on the volume of email sent over the last 30 days.
–
Average magnitude (IP addresses only)
–
Lifetime volume / 30 day volume (IP address profile pages only)
–
Bonded sender status (IP address profile pages only)
–
SenderBase Reputation Score (IP address profile pages only)
–
Days since first message (network owner and domain profile pages only)
–
Number of domains associated with this network owner (network owner and domain profile
pages only)
pages only)
–
Number of IP addresses in this network owner (network owner and domain profile pages only)
–
Number of IP addresses used to send email (network owner pages only)
Click More from SenderBase to see a page with all information supplied by the SenderBase
Reputation Service.
Reputation Service.
•
Details about the domains and IP addresses controlled by this network owner appear on network
owner profile pages. Details about the IP addresses in the domain appear on domain pages.
owner profile pages. Details about the IP addresses in the domain appear on domain pages.
From a domain profile page, you can click on a specific IP address to view specific information, or view
an organization profile page.
an organization profile page.
Sender Groups Report Page
The Sender Groups report page provides a summary of connections by sender group and mail flow
policy action, allowing you to review SMTP connection and mail flow policy trends. The Mail Flow by
Sender Group listing shows the percentage and number of connections for each sender group. The
Connections by Mail Flow Policy Action chart shows the percentage of connections for each mail flow
policy action. This page provides an overview of the effectiveness of your Host Access Table (HAT)
policies. For more information about the HAT, see the documentation or online help for your Email
Security appliance.
policy action, allowing you to review SMTP connection and mail flow policy trends. The Mail Flow by
Sender Group listing shows the percentage and number of connections for each sender group. The
Connections by Mail Flow Policy Action chart shows the percentage of connections for each mail flow
policy action. This page provides an overview of the effectiveness of your Host Access Table (HAT)
policies. For more information about the HAT, see the documentation or online help for your Email
Security appliance.
To view the Sender Groups report page, select Email > Reporting > Sender Groups.