Cisco Cisco Content Security Management Appliance M1070 Guida Utente
Chapter 3 Using Centralized Email Reporting
3-32
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Global Outbreak Details
The Global Outbreak Details section displays information about specific
outbreaks, including the ID, the date and time when the outbreak was first seen
globally, the lead time provided by Virus Outbreak Filters, and the number of
quarantined messages. You can select either global or local outbreaks, as well as
the number of messages to display. Sort the listing by clicking the column
headings.
outbreaks, including the ID, the date and time when the outbreak was first seen
globally, the lead time provided by Virus Outbreak Filters, and the number of
quarantined messages. You can select either global or local outbreaks, as well as
the number of messages to display. Sort the listing by clicking the column
headings.
The First Seen Globally time is determined by the Cisco IronPort Threat
Operations Center, based on data from SenderBase, the world’s largest email and
web traffic monitoring network. The Virus Outbreak Filters Protection time is
based on the difference between when each threat was detected by the Cisco
IronPort Threat Operations Center and the release of an anti-virus signature by a
major vendor.
Operations Center, based on data from SenderBase, the world’s largest email and
web traffic monitoring network. The Virus Outbreak Filters Protection time is
based on the difference between when each threat was detected by the Cisco
IronPort Threat Operations Center and the release of an anti-virus signature by a
major vendor.
A value of “--” indicates either a protection time does not exist, or the signature
times were not available from the anti-virus vendors (some vendors may not
report signature times). This does not indicate a protection time of zero. Rather,
it means that the information required to calculate the protection time is not
available.
times were not available from the anti-virus vendors (some vendors may not
report signature times). This does not indicate a protection time of zero. Rather,
it means that the information required to calculate the protection time is not
available.
Use the Virus Outbreaks page to answer the following types of questions:
•
How many messages are quarantined and by which Virus Outbreak Filter
rule?
rule?
•
How much lead time has the Virus Outbreak Filter feature been providing for
virus outbreaks?
virus outbreaks?
•
How do the local virus outbreaks compare to the global outbreaks?
Global outbreak data are automatically downloaded from the Cisco IronPort
Threat Operations Center every hour.
Threat Operations Center every hour.
Note
The Email Security appliances must be able to communicate with
downloads.cisco.com
to correctly populate the tables on the Virus Outbreaks
page.