Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Page de 460
 
13-5
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 13      SenderBase Network Participation
Will sharing data impact the performance of my Cisco IronPort appliances?
Cisco believes that there will be a minimal performance impact for most customers. We record data that 
already exists as part of the mail delivery process. Customer data is then aggregated on the appliance and 
sent to SenderBase servers in batches, typically every 5 minutes. We anticipate that the total size of data 
transferred via HTTPS will be less than 1% of the bandwidth of a typical company's email traffic.
When enabled, the Context Adaptive Scanning Engine (CASE) is used to collect and report the data 
(regardless of whether or not Cisco IronPort anti-spam scanning is enabled).
Note
If you choose to participate in the SenderBase Network, a “body scan” is performed on each message. 
This happens regardless of whether a filter or other action applied to the message would have triggered 
a body scan. See “Body Scanning Rule” in the “Using Message Filters to Enforce Email Policies” 
chapter of the Cisco IronPort AsyncOS for Email Advanced Configuration Guide for more information 
about body scanning.
If you have additional questions, please contact Cisco IronPort Customer Support. See 
.
Are there other ways I can share data?
For customers that want to share additional data to do even more to help Cisco provide top quality 
security services, there is also a command that allows this. This higher level of data sharing will also 
provide attachment filenames in clear, unhashed text, as well as hostnames of URLs in messages. If you 
are interested in learning more about this feature, please talk to your Systems Engineer or contact Cisco 
IronPort Customer Support.