Cisco Cisco Email Security Appliance C160 ユーザーガイド
27-15
Cisco AsyncOS 8.5.6 for Email User Guide
Chapter 27 Using Email Security Monitor
Email Security Monitor Pages
The page consists of two sections. On the left side of the page is a graph depicting the top senders by
total threat messages. Total threat messages include messages that are spam or virus positive or triggered
a content filter. On the right side of the page is a graph displaying top senders by clean messages on the
top half of the page. The bottom half of the page displays a chart showing all the columns sorted by total
messages (default setting).
total threat messages. Total threat messages include messages that are spam or virus positive or triggered
a content filter. On the right side of the page is a graph displaying top senders by clean messages on the
top half of the page. The bottom half of the page displays a chart showing all the columns sorted by total
messages (default setting).
Note
This page does not display information about message delivery. Delivery information, such as how many
messages from a particular domain were bounced can be tracked using the Delivery Status page.
messages from a particular domain were bounced can be tracked using the Delivery Status page.
You can select a time range on which to report, such as an hour, a week, or a custom range. As with all
reports, you can export the data for the graphs or the details listing to CSV format via the Export link.
reports, you can export the data for the graphs or the details listing to CSV format via the Export link.
The Outgoing Senders page can be used to answer the following types of questions:
•
Which IP addresses are sending the most virus or spam positive email?
•
Which IP addresses trigger content filters the most frequently?
•
Which domains are sending the most mail?
Delivery Status Page
If you suspect delivery problems to a specific recipient domain or if you want to gather information on
a Virtual Gateway address, the Monitor > Delivery Status Page provides monitoring information about
email operations relating to a specific recipient domain.
a Virtual Gateway address, the Monitor > Delivery Status Page provides monitoring information about
email operations relating to a specific recipient domain.
The Delivery Status Page displays the same information as the
tophosts
command within the CLI. (For
more information, see “Determining the Make-up of the Email Queue” in
)
This page displays a list of the top 20, 50, or 100 recipient domains for messages delivered by the system
within the last three hours. You can sort by latest host status, active recipients (the default), connections
out, delivered recipients, soft bounced events, and hard bounced recipients by clicking the links in the
column heading for each statistic.
within the last three hours. You can sort by latest host status, active recipients (the default), connections
out, delivered recipients, soft bounced events, and hard bounced recipients by clicking the links in the
column heading for each statistic.
•
To search for a specific domain, type the name of the domain in the Domain Name: field and click
Search.
Search.
•
To drill down on a domain shown, click the domain name link.
The results are shown in an Delivery Status Details Page.
Note
Any activity for a recipient domain results in that domain being “active” and thus present in the overview
page. For example, if mail remains in the outbound queue due to delivery problems, that recipient
domain continues to be listed in the outgoing mail overview.
page. For example, if mail remains in the outbound queue due to delivery problems, that recipient
domain continues to be listed in the outgoing mail overview.
Related Topics
•
•