Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1224
 
28-10
Cisco AsyncOS 9.5 for Email User Guide
 
Chapter 28      Using Email Security Monitor
  Email Security Monitor Pages
Use the SenderBase Reputation service to drill down on and examine the relationship between 
specific IP addresses, domains, and organizations to obtain more information about a sender. 
Drill down on specific senders to obtain more information about a sender from the SenderBase 
Reputation Service, including a sender’s SenderBase Reputation Score and which sender group the 
domain matched most recently. Add senders to sender groups.
Drill down on a specific sender who sent a high volume of spam or virus email, as determined by 
the anti-spam or anti-virus security services.
Once you have gathered information on a domain, you can add the IP address, domain, or 
organization to an existing sender group (if necessary) by clicking “Add to Sender Group” from a 
domain, IP address, or network owner profile page. See 
Related Topics
Incoming Mail
The Incoming Mail page provides access to real-time activity of all public listeners configured on your 
system and is comprised of two main sections: the mail trend graphs summarizing the top sender 
domains received (by total threat messages, total clean messages, and total graymail messages) and the 
Incoming Mail Details listing.
See 
 for an explanation of the data included in the Incoming 
Mail Details listing.
Related Topics
Notes on Time Ranges in the Mail Trend Graph
The Email Security Monitor feature constantly records data about the mail flowing into your gateway. 
The data are updated every 60 seconds, but the display shown is delayed by 120 seconds behind the 
current system time. You can specify the time range to include in the results shown. Because the data is 
monitored in real time, information is periodically updated and summarized in the database. 
Choose from the time range options in 
 
Table 28-1
Time Ranges Available in the Email Security Monitor Feature 
This time range selected in the GUI
...is defined as:
Hour
the last 60 minutes + up to 5 minutes
Day
the last 24 hours + the last 60 minutes
Week
the last 7 days + the elapsed hours of the current day 
30 days 
the last 30 days + the elapsed hours of the current day 
90 days 
the last 90 days + the elapsed hours of the current day 
Yesterday 
00:00 to 23:59 (midnight to 11:59 PM)