Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
3-3
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Chapter 3 Using Centralized Email Reporting
How Reporting Data is Stored
All of the appliances store reporting data.
Table 3-1
shows what time periods that
each appliance stores data.
Searching and the Interactive Report Pages
Many of the interactive report pages include a search form. You can search for
several types of criteria, including the following:
several types of criteria, including the following:
•
IP address
•
Domain
•
Network owner
•
Internal user
•
Destination domain
•
Internal sender domain
•
Internal sender IP address
For most searches, choose whether to exactly match the search text or look for
items starting with the entered text (for example, starts with “ex” will match
“example.com”).
items starting with the entered text (for example, starts with “ex” will match
“example.com”).
For IP address searches, the entered text is always interpreted as the beginning of
up to four IP octets in dotted decimal format. For example, ‘17’ will search in the
range 17.0.0.0 through 17.255.255.255, so it will match 17.0.0.1 but not
172.0.0.1. For an exact match search, enter all four octets. IP address searches
also support Classless Inter-Domain Routing (CIDR) format (17.16.0.0/12).
up to four IP octets in dotted decimal format. For example, ‘17’ will search in the
range 17.0.0.0 through 17.255.255.255, so it will match 17.0.0.1 but not
172.0.0.1. For an exact match search, enter all four octets. IP address searches
also support Classless Inter-Domain Routing (CIDR) format (17.16.0.0/12).
Table 3-1
Reporting Data Storage on the Email and Web Security
Appliances
Appliances
Minute
Hourly
Daily
Weekly
Monthly
Yearly
Local Reporting on C-Series or
S-Series
S-Series
•
•
•
•
•
Centralized Reporting on
C-Series or S-Series
C-Series or S-Series
•
•
•
•
M-Series
•
•
•
•
•