Cisco Cisco Content Security Management Appliance M1070 Guia Do Utilizador
4-14
AsyncOS 9.1 for Cisco Content Security Management Appliances User Guide
Chapter 4 Using Centralized Email Security Reporting
Understanding the Email Reporting Pages
Incoming Mail Page
The Email > Reporting > Incoming Mail page on the Security Management appliance provides
interactive reporting on the real-time information for all remote hosts connecting to your managed
Security Management appliances. You can gather information about the IP addresses, domains, and
network owners (organizations) sending mail to your system. You can also perform a Sender Profile
search on IP addresses, domains, or organizations that have sent mail to you.
interactive reporting on the real-time information for all remote hosts connecting to your managed
Security Management appliances. You can gather information about the IP addresses, domains, and
network owners (organizations) sending mail to your system. You can also perform a Sender Profile
search on IP addresses, domains, or organizations that have sent mail to you.
The Incoming Mail page consists of two main sections: the mail trend graphs summarizing the top
senders (by total threat messages and by total clean messages) and the Incoming Mail Details interactive
table.
senders (by total threat messages and by total clean messages) and the Incoming Mail Details interactive
table.
The Incoming Mail Details interactive table displays detailed information about the particular IP
address, domain, or network owner (organization). You can access a Sender Profile page for any IP
address, domain, or network owner by clicking the corresponding link at the top of the Incoming Mail
page, or on other Sender Profile pages.
address, domain, or network owner (organization). You can access a Sender Profile page for any IP
address, domain, or network owner by clicking the corresponding link at the top of the Incoming Mail
page, or on other Sender Profile pages.
From the Incoming Mail pages you can:
•
Perform a search on IP addresses, domains, or network owners (organizations) that have sent mail
to your Security Management appliances. See
to your Security Management appliances. See
•
View the Sender Groups report to monitor connections according to the specific sender group and
mail flow policy actions. See the
mail flow policy actions. See the
for more
information.
•
See detailed statistics on senders that have sent mail to your appliances. The statistics include the
number of attempted messages broken down by security service (sender reputation filtering,
anti-spam, anti-virus, and so forth).
number of attempted messages broken down by security service (sender reputation filtering,
anti-spam, anti-virus, and so forth).
•
Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam
or anti-virus security services.
or anti-virus security services.
•
Use the SenderBase Reputation Service to examine the relationship between specific IP addresses,
domains, and organizations to obtain information about a sender.
domains, and organizations to obtain information about a sender.
•
Obtain more information about a sender from the SenderBase Reputation Service, including a
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most
recently. Add senders to sender groups.
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most
recently. Add senders to sender groups.
•
Obtain more information about a specific sender who has sent a high volume of spam or virus email,
as determined by the anti-spam or anti-virus security services.
as determined by the anti-spam or anti-virus security services.
Views Within the Incoming Mail Page
The Incoming Mail page has three different views:
•
IP Addresses
•
Domains
•
Network Owners
These views provide a snapshot of the remote hosts connecting to the system in the context of the
selected view.
selected view.
Additionally, in the Incoming Mail Details section of the Incoming Mail Page, you can click on a
Sender’s IP Address, Domain name, or Network Owner Information to retrieve specific Sender Profile
Information. For more information on Sender Profile information, see the
Sender’s IP Address, Domain name, or Network Owner Information to retrieve specific Sender Profile
Information. For more information on Sender Profile information, see the
.