Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1197
 
6-6
User Guide for AsyncOS 9.7 for Cisco Email Security Appliances
 
Chapter 6      Sender Reputation Filtering
  Editing Sender Reputation Filtering Score Thresholds for a Listener
Testing Sender Reputation Filtering Using the SBRS
Unless you regularly receive a large portion of spam, or you have set up “dummy” accounts to 
specifically receive spam for your organization, it may be difficult to immediately test the SBRS policies 
you have implemented. However, if you add entries for reputation filtering with SenderBase Reputation 
Scores into a listener’s HAT as indicated in 
, you will notice that a smaller percentage of 
inbound mail will be “unclassified.”
Test the policies using the 
trace
 command with an arbitrary SBRS. See 
. The 
trace
 command is available in the CLI as well as the GUI.
Table 6-1
Suggested Mail Flow Policies for Implementing the SBRS 
Policy Name
Primary 
Behavior 
(Access 
Rule) Parameters
Value
$BLOCKED
REJECT
None
$THROTTLED
ACCEPT
Maximum messages / session:
Maximum recipients / message:
Maximum message size:
Maximum concurrent connections:
Use Spam Detection:
Use TLS:
Maximum recipients / hour:
Use SenderBase:
10
20
1 MB
10
ON
OFF
20 
(recommended)
ON
$ACCEPTED
(Public Listener)
ACCEPT
Maximum messages / session:
Maximum recipients / message:
Maximum message size:
Maximum concurrent connections:
Use Spam Detection:
Use TLS:
Use SenderBase:
1,000
1,000
100 MB
1,000
ON
OFF
ON
$TRUSTED
ACCEPT
Maximum messages / session:
Maximum recipients / message:
Maximum message size:
Maximum concurrent connections:
Use Spam Detection:
Use TLS:
Maximum recipients / hour:
Use SenderBase:
1,000
1,000
100 MB
1,000
OFF
OFF
-1
 (disabled) 
OFF