Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 1140
 
27-11
Cisco AsyncOS 8.5.5 for Email Security User Guide
 
Chapter 27      Using Email Security Monitor
  Email Security Monitor Pages
Reporting Pages Populated with Data: Sender Profile Pages
If you clicked a sender in the Incoming Mail Details table on an Incoming Mail page, the resulting 
Sender Profile page is listed with data for the particular IP address, domain, or organization (network 
owner). Sender Profile pages show detailed information for the sender. You can access a Sender Profile 
page for any network owner, domain, or IP address by clicking on the specified item in the Incoming 
Mail or other Sender Profile pages. Network owners are entities that contain domains; domains are 
entities that contain IP addresses. For more information on this relationship and how it relates to the 
SenderBase Reputation Service, see 
The Sender Profile pages displayed for IP addresses, network owners, and domains vary slightly. For 
each, the page contains a graph and summary table for incoming mail from this sender. Below the graph 
is a table listing domains or IP addresses associated with the sender (the Sender Profile page for 
individual IP addresses does not contain the detailed listing) and an information section with the current 
SenderBase, sender group, and network information for the sender.
Network Owner profile pages contain information for the network owner, as well as the domains and 
IP addresses associated with that network owner. 
Domain profile pages contain information for the domains and IP addresses associated with that 
domain. 
IP address profile pages contain information about the IP address only. 
Each sender profile page contains the following data in the Current Information table at the bottom of 
the page:
The Global information from the SenderBase Reputation Service, including: 
IP Address, Domain Name, and/or Network Owner 
Network Owner Category (Network Owner Only) 
CIDR Range (IP addresses only) 
Daily Magnitude and Monthly Magnitude for the IP address, Domain, and/or Network Owner 
Days since the first message was received from this sender
Last sender group and whether DNS verified (IP Address sender profile page only)
Daily magnitude is a measure of how many messages a domain has sent over the last 24 hours. 
Similar to the Richter scale used to measure earthquakes, SenderBase magnitude is a measure of 
message volume calculated using a log scale with a base of 10. The maximum theoretical value of 
the scale is set to 10, which equates to 100% of the world's email message volume (approximately 
10 billion messages/day). Using the log scale, a one-point increase in magnitude equates to a 10x 
increase in actual volume. 
Monthly magnitude is calculated using the same approach as daily magnitude, except the 
percentages are calculated based on the volume of email sent over the last 30 days. 
Average Magnitude (IP addresses only) 
Lifetime Volume / 30 Day Volume (IP address profile pages only) 
Bonded Sender Status (IP address profile pages only)
SenderBase Reputation Score (IP address profile pages only) 
Days Since First Message (network owner and domain profile pages only) 
Number of Domains Associated with this Network Owner (network owner and domain profile 
pages only) 
Number of IP Addresses in this Network Owner (network owner and domain profile pages only)