Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1138
 
26-21
Cisco AsyncOS 8.5 for Email User Guide
 
Chapter 26      Using Email Security Monitor
  Email Security Monitor Pages
The DLP Incidents Details table shows the total number of DLP incidents per policy, with a breakdown 
by severity level, and the number of messages delivered in the clear, delivered encrypted, or dropped. 
Click on the column headings to sort the data.
DLP Policy Detail Page
If you clicked the name of a DLP policy in the DLP Incidents Details table, the resulting DLP Policy 
Detail page displays the DLP incidents data for the policy. The page displays graphs on the DLP 
incidents based on severity. 
The page also includes an Incidents by Sender listing at the bottom of the page that lists each internal 
user who has sent a message that violated the DLP policy. The listing also shows the total number of 
DLP incidents for this policy per user, with a breakdown by severity level, and whether any of the 
messages were delivered in the clear, delivered encrypted, or dropped. You can use the Incidents by 
Sender listing to find out which users may be sending your organization’s sensitive data to people outside 
your network.
Figure 26-10
DLP Policy Details Charts: Top Incidents by Severity, Incident Summary
Figure 26-11
DLP Policy Incidents by Sender
Clicking on the sender name opens up the Internal Users page. See 
 
for more information.
The Content Filters Page
The Content Filters page shows information about the top incoming and outgoing content filter matches 
(which content filter had the most matching messages) in two forms: a bar chart and a listing. Using the 
Content Filters page, you can review your corporate policies on a per-content filter or per-user basis and 
answer questions like: