Cisco Cisco Email Security Appliance C170 사용자 가이드

다운로드
페이지 460
 
7-4
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
OL-25136-01
Chapter 7      Reputation Filtering
Figure 7-1
The SenderBase Reputation Service
Step 1
SenderBase affiliates send real-time, global data
Step 2
Sending MTA opens connection with the Cisco IronPort appliance
Step 3
Cisco IronPort appliance checks global data for the connecting IP address
Step 4
SenderBase Reputation Service calculates the probability this message is spam and assigns a SenderBase 
Reputations Score
Step 5
Cisco IronPort returns the response based on the SenderBase Reputation Score
Implementing SenderBase Reputation Filters
Cisco IronPort Reputation Filter technology aims to shunt as much mail as possible from the remaining 
security services processing that is available on the Cisco IronPort appliance. (See 
.) 
When enabling reputation filtering, mail from known bad senders is simply refused. Known good mail 
from global 2000 companies is automatically routed around the spam filters, reducing the chance of false 
positives. Unknown, or “grey” email is routed to the anti-spam scanning engine. Using this approach, 
reputation filters can reduce the load on the content filters by as much as 50%.
Sending MTA
SBRS Scoring Engine
•Global complaint data
•Global volume data
SenderBase Affiliate Network
1
5
3
4
2
1.2.3.4
HELO
1.2.3.4
Rule hits 
SBRS = 
x.x
250-Recipient Accepted
or 
452-Too many recipients this hour
or 
554-Access Denied
for 
1.2.3.4
IronPort appliance