Cisco Cisco Email Security Appliance C160 Mode D'Emploi
17-4
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 17 The Cisco IronPort M-Series Security Management Appliance
Figure 17-2
The Reporting Service Settings Page
Step 2
In the Reporting Service section, select the Centralized Reporting option.
Step 3
Submit and commit your changes.
Note
To use centralized reporting, you must enable the feature on the Email Security appliances and on the
Security Management appliance. For information about enabling centralized reporting on the Security
Management appliance, see the Cisco IronPort AsyncOS for Security Management User Guide .
Security Management appliance. For information about enabling centralized reporting on the Security
Management appliance, see the Cisco IronPort AsyncOS for Security Management User Guide .
Centralized Reporting Mode
After an Email Security appliance is configured to use centralized reporting and you add it to the
Security Management appliance as a managed appliance, the Email Security appliance operates in
centralized reporting mode. When an Email Security appliance is in centralized reporting mode, the
scheduled reports for that appliance are suspended, and you can no longer access the scheduled report
configuration page and the archived reports for the appliance. Also, the appliance stores only a week’s
worth of data. New data for the monthly and yearly reports is stored on the Security Management
appliance. Existing data on the Email Security appliance for the monthly report is not transferred to the
Security Management appliance. After centralized reporting is disabled, the Email Security appliance
begins storing new monthly report data.
Security Management appliance as a managed appliance, the Email Security appliance operates in
centralized reporting mode. When an Email Security appliance is in centralized reporting mode, the
scheduled reports for that appliance are suspended, and you can no longer access the scheduled report
configuration page and the archived reports for the appliance. Also, the appliance stores only a week’s
worth of data. New data for the monthly and yearly reports is stored on the Security Management
appliance. Existing data on the Email Security appliance for the monthly report is not transferred to the
Security Management appliance. After centralized reporting is disabled, the Email Security appliance
begins storing new monthly report data.
If you disable centralized reporting on the Email Security appliance, scheduled reports resume, and you
can access its archived reports. After disabling centralized reporting, the appliance only displays data
for the past hour and day, but not the past week or month. This is temporary. The appliance will display
the reports for the past week and month after it accumulates enough data. If the Email Security appliance
is placed back into centralized reporting mode, it will display data for the past week in the interactive
reports.
can access its archived reports. After disabling centralized reporting, the appliance only displays data
for the past hour and day, but not the past week or month. This is temporary. The appliance will display
the reports for the past week and month after it accumulates enough data. If the Email Security appliance
is placed back into centralized reporting mode, it will display data for the past week in the interactive
reports.
Configuring an Email Security Appliance to Use Centralized Tracking
You can configure an Email Security appliance to use either local (on-box) tracking or centralized
tracking.
tracking.
Note
You cannot enable both centralized and local tracking on an Email Security appliance.
Step 1
Click Security Services > Message Tracking.
The Message Tracking Service page is displayed.
Figure 17-3
The Message Tracking Service Page
Step 2
In the Message Tracking Service section, click Edit Settings.