Cisco Cisco Email Security Appliance C160 Mode D'Emploi
28-21
Cisco AsyncOS 9.1 for Email User Guide
Chapter 28 Using Email Security Monitor
Email Security Monitor Pages
•
How many messages are being quarantined and what type of threats were they?
•
How much lead time has the Outbreak Filter feature been providing for virus outbreaks?
•
How do my local virus outbreaks compare to the global outbreaks?
Virus Types Page
The Virus Types page provides an overview of the viruses entering and being sent from your network.
The Virus Types page displays the viruses that have been detected by the virus scanning engines running
on your appliance. You might want to use this report to take a specific action against a particular virus.
For example, if you see that you are receiving a high volume of a viruses known to be embedded in PDF
files, you might want to create a filter action to quarantine messages with PDF attachments.
The Virus Types page displays the viruses that have been detected by the virus scanning engines running
on your appliance. You might want to use this report to take a specific action against a particular virus.
For example, if you see that you are receiving a high volume of a viruses known to be embedded in PDF
files, you might want to create a filter action to quarantine messages with PDF attachments.
If you run multiple virus scanning engines, the Virus Types page includes results from all enabled virus
scanning engines. The name of the virus displayed on the page is a name determined by the virus
scanning engines. If more than one scanning engine detects a virus, it is possible to have more than one
entry for the same virus.
scanning engines. The name of the virus displayed on the page is a name determined by the virus
scanning engines. If more than one scanning engine detects a virus, it is possible to have more than one
entry for the same virus.
The Virus Types page gives you an overview of the viruses entering or being sent from or to your
network. The Top Incoming Virus Detected section shows a chart view of the viruses that have been sent
to your network in descending order. The Top Outgoing Virus Detected section shows a chart view of
the viruses that have been sent from your network in descending order.
network. The Top Incoming Virus Detected section shows a chart view of the viruses that have been sent
to your network in descending order. The Top Outgoing Virus Detected section shows a chart view of
the viruses that have been sent from your network in descending order.
Note
To see which hosts sent virus-infected messages to your network, you can go to the Incoming Mail page,
specify the same reporting period and sort by virus-positive. Similarly, to see which IP addresses have
sent virus-positive email within your network, you can view the Outgoing Senders page and sort by
virus-positive messages.
specify the same reporting period and sort by virus-positive. Similarly, to see which IP addresses have
sent virus-positive email within your network, you can view the Outgoing Senders page and sort by
virus-positive messages.
The VirusTypes Details listing displays information about specific viruses, including the infected
incoming and outgoing messages, and the total infected messages. The details listing for infected
incoming messages displays the name of the virus and the number of incoming messages infected with
this virus. Similarly, the outgoing messages displays the name of the virus and the number of outgoing
messages infected with the virus. You can sort the Virus Type details by Incoming Messages, Outgoing
Messages, or Total Infected Messages.
incoming and outgoing messages, and the total infected messages. The details listing for infected
incoming messages displays the name of the virus and the number of incoming messages infected with
this virus. Similarly, the outgoing messages displays the name of the virus and the number of outgoing
messages infected with the virus. You can sort the Virus Type details by Incoming Messages, Outgoing
Messages, or Total Infected Messages.
URL Filtering Page
•
URL Filtering report modules are populated only if URL filtering is enabled.
•
URL Filtering reports are available for incoming and outcoming messages.
•
Only messages that are scanned by the URL filtering engine (either as part of anti-spam/outbreak
filter scanning or through message/content filters) are included in these modules. However, not all
of the results are necessarily specifically attributable to the URL Filtering feature.
filter scanning or through message/content filters) are included in these modules. However, not all
of the results are necessarily specifically attributable to the URL Filtering feature.
•
The Top URL Categories module includes all categories found in messages that have been scanned,
whether or not they match a content or message filter.
whether or not they match a content or message filter.
•
Each message can be associated with only one URL reputation level. For messages with multiple
URLs, the statistics reflect the lowest reputation of any URL in the message.
URLs, the statistics reflect the lowest reputation of any URL in the message.
•
URLs in the global whitelist configured at Security Services > URL Filtering are not included in
reports.
reports.