Cisco Cisco Email Security Appliance C160 Mode D'Emploi
28-19
Cisco AsyncOS 9.0 for Email User Guide
Chapter 28 Using Email Security Monitor
Email Security Monitor Pages
•
Which content filter is being triggered the most by incoming or outgoing mail?
•
Who are the top users sending or receiving mail that is triggering a particular content filter?
You can click the name of the content filter in the listing to view more information about that filter on
the Content Filter detail page.
the Content Filter detail page.
Related Topics
•
Content Filter Details
The Content Filter detail page displays matches for that filter over time, as well as matches by internal
user.
user.
In the Matches by Internal User section, you can click the name of a user to view that internal user’s
(email address) Internal User details page (see
(email address) Internal User details page (see
).
DMARC Verification Page
The DMARC Verification page shows the top domains that failed DMARC verification and the details
of actions AsyncOS performed on the messages that failed DMARC verification. You can use this report
to fine-tune your DMARC settings and answer these kinds of questions:
of actions AsyncOS performed on the messages that failed DMARC verification. You can use this report
to fine-tune your DMARC settings and answer these kinds of questions:
•
Which are the domains that sent maximum number of messages that are not DMARC compliant?
•
For each domain, what are the actions AsyncOS performed on the messages that failed DMARC
verification?
verification?
The DMARC Verification page contains:
•
A bar chart showing top domains by DMARC verification failures.
•
Tabular representation of the following, for each domain:
–
Number of messages that were rejected, quarantined, or accepted without taking any action.
Click on the number to view a list of messages under the selected category.
Click on the number to view a list of messages under the selected category.
–
Number messages that passed DMARC verification.
–
Total number of DMARC verification attempts.
You can select a time range on which to report, such as an hour, a week, or a custom range. As with all
reports, you can export the data for the graphs or the details listing to CSV format via the Export link
or PDF format by clicking the Printable (PDF) link.
reports, you can export the data for the graphs or the details listing to CSV format via the Export link
or PDF format by clicking the Printable (PDF) link.
Outbreak Filters Page
The Outbreak Filters page shows the current status and configuration of Outbreak Filters on your
appliance as well as information about recent outbreaks and messages quarantined due to Outbreak
Filters. You can use this page to monitor your defense against targeted virus, scam, and phishing attacks.
appliance as well as information about recent outbreaks and messages quarantined due to Outbreak
Filters. You can use this page to monitor your defense against targeted virus, scam, and phishing attacks.
The Threats By Type section shows the different types of threat messages received by the appliance.
The Threat Summary section shows a breakdown of the threat messages by Malware, Phish, Scam, and
Virus. Click on the number to view a list of all the messages that are included in that number using
Message Tracking.
Virus. Click on the number to view a list of all the messages that are included in that number using
Message Tracking.