Cisco Cisco Email Security Appliance C160 Mode D'Emploi
2-8
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
OL-25138-01
Chapter 2 Using Email Security Monitor
Email Security Monitor Pages
The Incoming Mail page extends to include a group of pages (Incoming Mail, Sender Profiles, and the
Sender Group Report). From the Incoming Mail pages, you can:
Sender Group Report). From the Incoming Mail pages, you can:
•
Perform a search on IP addresses, domains, or organizations (network owners) that have sent mail
to you.
to you.
•
View the Sender Groups report to see connections via a specific sender group and mail flow policy
actions. See
actions. See
for more information.
•
See detailed statistics on senders which have sent mail to you, including the number of attempted
messages broken down by security service (reputation filtering, anti-spam, anti-virus, etc.).
messages broken down by security service (reputation filtering, anti-spam, anti-virus, etc.).
•
Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam
or anti-virus security services.
or anti-virus security services.
•
Use the Cisco IronPort SenderBase Reputation service to drill down on and examine the relationship
between specific IP addresses, domains, and organizations to obtain more information about a
sender.
between specific IP addresses, domains, and organizations to obtain more information about a
sender.
•
Drill down on specific senders to obtain more information about a sender from the Cisco IronPort
SenderBase Reputation Service, including a sender’s SenderBase Reputation Score and which
sender group the domain matched most recently. Add senders to sender groups.
SenderBase Reputation Service, including a sender’s SenderBase Reputation Score and which
sender group the domain matched most recently. Add senders to sender groups.
•
Drill down on a specific sender who sent a high volume of spam or virus email, as determined by
the anti-spam or anti-virus security services.
the anti-spam or anti-virus security services.
•
Once you have gathered information on a domain, you can add the IP address, domain, or
organization to an existing sender group (if necessary) by clicking “Add to Sender Group” from a
domain, IP address, or network owner profile page. See the “Configuring the Gateway to Receive
Email” chapter in the Cisco IronPort AsyncOS for Email Configuration Guide.
organization to an existing sender group (if necessary) by clicking “Add to Sender Group” from a
domain, IP address, or network owner profile page. See the “Configuring the Gateway to Receive
Email” chapter in the Cisco IronPort AsyncOS for Email Configuration Guide.
Incoming Mail
The Incoming Mail page provides access to real-time activity of all public listeners configured on your
system and is comprised of two main sections: the mail trend graphs summarizing the top domains
received (by total threat messages and by total clean messages) and the Incoming Mail Details listing.
system and is comprised of two main sections: the mail trend graphs summarizing the top domains
received (by total threat messages and by total clean messages) and the Incoming Mail Details listing.