Cisco Cisco Email Security Appliance C170 사용자 가이드
2-22
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
OL-25138-01
Chapter 2 Using Email Security Monitor
Email Security Monitor Pages
Using the Internal Users report, you can answer these kinds of questions:
•
Who is sending the most external email?
•
Who receives the most clean email?
•
Who receives the most spam?
•
Who is triggering which content filters?
•
Whose email is getting caught by content filters?
Inbound Internal Users are the users for which you received email, based on the Rcpt To: address.
Outbound Internal Users are based on the Mail From: address and are useful when tracking the types of
email that senders on your internal network are sending.
Outbound Internal Users are based on the Mail From: address and are useful when tracking the types of
email that senders on your internal network are sending.
Note that some outbound mail (like bounces) have a null sender. They are counted under outbound and
“unknown.”
“unknown.”
Click on an internal user to view the Internal User detail page for that user.
Internal User Details
The Internal User detail page shows detailed information about the specified user, including a breakdown
of incoming and outgoing messages showing the number of messages in each category (spam detected,
virus detected, stopped by content filter, and clean). Incoming and outgoing content filter and DLP
policy matches are also shown.
of incoming and outgoing messages showing the number of messages in each category (spam detected,
virus detected, stopped by content filter, and clean). Incoming and outgoing content filter and DLP
policy matches are also shown.
Figure 2-19
Internal User Details Page
Click on a content filter name to view detailed information for that filter in the corresponding content
filter information page (see
filter information page (see
). You can use this method to get a list
of users who also sent or received mail that matched that particular content filter.