Cisco Cisco Content Security Management Appliance M1070 Guida Utente

Pagina di 413
 
4-13
Cisco IronPort AsyncOS 8.0 for Security Management User Guide
 
Chapter 4      Using Centralized Email Security Reporting
Following these rules, if a message is marked as spam positive, and your anti-spam settings are set to 
drop spam positive messages, the message is dropped and the spam counter is incremented. 
Further, if your anti-spam settings are set to let the spam positive message continue on in the email 
pipeline, and a subsequent content filter drops, bounces, or quarantines the message, the spam count is 
still incremented. The content filter count is only incremented if the message is not spam or virus 
positive.
Categorizing Email Messages on Overview Page
Messages reported on the Overview page are categorized as follows:
Table 4-4
Email Categories on Overview Page
Category
Description
Stopped by Reputation Filtering
All connections blocked by HAT policies multiplied by a 
fixed multiplier (see the 
) plus all recipients blocked by 
recipient throttling.
The Stopped by Reputation Filtering total on the Overview 
page is always based on a complete count of all rejected 
connections. Only the per-sender connection counts are 
limited due to load.
Invalid Recipients
All mail recipients rejected by conversational LDAP 
rejection plus all RAT rejections.
Spam Messages Detected
The total count of messages detected by the anti-spam 
scanning engine as positive or suspect. Additionally, 
messages that are both spam and virus positive.
Virus Messages Detected
The total count and percentage of messages detected as virus 
positive and not also spam.
Stopped by Content Filter
The total count of messages that were stopped by a content 
filter.
Marketing Messages
The total count and percentage of messages detected as 
unwanted marketing messages. This list item appears on the 
page only if marketing data are present in the system.
Clean Messages Accepted
This category is mail that is accepted and deemed to be virus 
and spam free. 
The most accurate representation of clean messages accepted 
when taking per-recipient scanning actions (such as 
splintered messages being processed by separate mail 
policies) into account. 
However, because messages that are marked as spam or virus 
positive and still delivered are not counted, the actual number 
of messages delivered may differ from the clean message 
count.
If messages match a message filter and are not dropped or 
bounced by the filter, they are treated as clean. Messages 
dropped or bounced by a message filter are not counted in the 
totals.