Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi
4-25
AsyncOS 9.5.x for Cisco Content Security Management Appliances User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
From the Content Filters page you can also generate a PDF or export raw data to a CSV file. For
information on printing or exporting a file, see the
information on printing or exporting a file, see the
.
Note
You can generate a scheduled report for the Content Filter page. See the
Content Filter Details Page
The Content Filter Detail page displays matches for the filter over time, as well as matches by internal
user.
user.
In the Matches by Internal User section, click the name of a user to view the detail page for the internal
user (email address). For more information, see
user (email address). For more information, see
.
If your access privileges allow you to view Message Tracking data: To view Message Tracking details
for the messages that populate this report, click a blue number link in the table.
for the messages that populate this report, click a blue number link in the table.
DMARC Verification
The DMARC Verification page shows the top sender domains that failed Domain-based Message
Authentication, Reporting and Conformance (DMARC) verification, and a summary of the actions taken
for incoming messages from each domain. You can use this report to fine-tune your DMARC settings
and answer these kinds of questions:
Authentication, Reporting and Conformance (DMARC) verification, and a summary of the actions taken
for incoming messages from each domain. You can use this report to fine-tune your DMARC settings
and answer these kinds of questions:
•
Which domains sent the most messages that failed DMARC verification?
•
For each domain, what actions were taken on messages that failed DMARC verification?
For more information about DMARC verification, see the Email Authentication chapter in the online
help or user guide for your Email Security appliance.
help or user guide for your Email Security appliance.
Virus Types Page
The Email > Reporting > Virus Types page provides an overview of the viruses that are sent to and
from your network. The Virus Types page displays the viruses that have been detected by the virus
scanning engines running on the Email Security appliances and are displayed on the Security
Management appliance. Use this report to take action against a particular virus. For example, if you see
that you are receiving a high volume of viruses known to be embedded in PDF files, you can create a
filter action to quarantine messages with PDF attachments.
from your network. The Virus Types page displays the viruses that have been detected by the virus
scanning engines running on the Email Security appliances and are displayed on the Security
Management appliance. Use this report to take action against a particular virus. For example, if you see
that you are receiving a high volume of viruses known to be embedded in PDF files, you can create a
filter action to quarantine messages with PDF attachments.
Note
Outbreak Filters can quarantine these types of virus-infected messages with no user intervention.
If you run multiple virus scanning engines, the Virus Types page includes results from all enabled virus
scanning engines. The name of the virus that appears on the page is determined by the virus scanning
engines. If more than one scanning engine detects a virus, it is possible to have more than one entry for
the same virus.
scanning engines. The name of the virus that appears on the page is determined by the virus scanning
engines. If more than one scanning engine detects a virus, it is possible to have more than one entry for
the same virus.