Cisco Cisco Content Security Management Appliance M1070 ユーザーガイド

Alternately, if the message were quarantined by Outbreak Filters, it would not be counted until it was 
released from the quarantine and again processed through the work queue. 

For complete information about message processing precedence, see chapter about the email pipeline in 
the online help or user guide for your Email Security appliance. 

Messages reported on the Overview page are categorized as follows:

All connections blocked by HAT policies multiplied by a fixed multiplier 
(see the 

) 

plus all recipients blocked by recipient throttling.

The Stopped by Reputation Filtering total on the Overview page is always 
based on a complete count of all rejected connections. Only the per-sender 
connection counts are limited due to load.

All mail recipients rejected by conversational LDAP rejection plus all RAT 
rejections.

The total count of messages detected by the anti-spam scanning engine as 
positive or suspect. Additionally, messages that are both spam and virus 
positive.

The total count and percentage of messages detected as virus positive and not 
also spam. 

The following messages are counted in the “Virus Detected” category: 

Messages with a virus scan result of “Repaired” or “Infectious”

Messages with a virus scan result of “Encrypted” when the the option to 
count encrypted messages as containing viruses is selected 

Messages with a virus scan result of “Unscannable” when the action for 
unscannable messages is NOT “Deliver” 

Messages with a virus scan result of “Unscannable” or “Encrypted” 
when the option to deliver to an alternate mail host or an alternate 
recipient is selected 

Messages that are deleted from the Outbreak quarantine, either manually 
or by timing out. 

The total count of messages that were stopped by a content filter.

The total count of messages that failed DMARC verification.