The Email reporting functionality aggregates information from individual or multiple Email Security
appliances so that you can monitor your email traffic patterns and security risks. You can run reports in
real-time to view an interactive display of system activity over a specific period of time, or you can
schedule reports and run them at regular intervals. Reporting functionality also allows you to export raw
data to a file.

This feature centralizes the reports listed under the Monitor menu of the Email Security appliance.

The Centralized Email Reporting feature not only generates high-level reports, allowing you to
understand what is happening on their network, but it also allows you to drill down and see traffic details
for a particular domain, user, or category.

The Centralized Tracking feature allows you to track email messages that traverse multiple Email
Security appliances.

Note

The Email Security appliance only stores data if local reporting is used. If centralized reporting is
enabled for the Email Security appliance then the Email Security appliance does NOT retain any
reporting data except for System Capacity and System Status. If Centralized Email Reporting is not
enabled, the only reports that are generated are System Status and System Capacity.

For more information about availability of report data during and after the transition to centralized
reporting, see the “Centralized Reporting Mode” section of the Cisco IronPort AsyncOS for Email
Security Configuration Guide.