Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1094
 
26-20
Cisco AsyncOS 8.0.1 for Email User Guide
 
Chapter 26      Using Email Security Monitor
  Email Security Monitor Pages
The page consists of two sections: graphs depicting the top users by clean incoming and outgoing 
messages, and user mail flow details. You can select a time range on which to report (hour, day, week, 
or month). As with all reports, you can export the data for the graphs or the details listing to CSV format 
via the Export link.
The User Mail Flow Details listing breaks down the mail received and sent by each email address into 
Clean, Spam Detected (incoming only), Virus Detected, and Content Filter Matches. You can sort the 
listing by clicking on the column headers.
Using the Internal Users report, you can answer these kinds of questions:
Who is sending the most external email?
Who receives the most clean email?
Who receives the most spam?
Who is triggering which content filters?
Whose email is getting caught by content filters?
Inbound Internal Users are the users for which you received email, based on the Rcpt To: address. 
Outbound Internal Users are based on the Mail From: address and are useful when tracking the types of 
email that senders on your internal network are sending.
Note that some outbound mail (like bounces) have a null sender. They are counted under outbound and 
“unknown.”
Click on an internal user to view the Internal User detail page for that user. 
Internal User Details
The Internal User detail page shows detailed information about the specified user, including a breakdown 
of incoming and outgoing messages showing the number of messages in each category (spam detected, 
virus detected, stopped by content filter, and clean). Incoming and outgoing content filter and DLP 
policy matches are also shown.