Cisco Cisco Email Security Appliance C170 Guia Do Utilizador
42-10
Cisco AsyncOS 9.1 for Email User Guide
Chapter 42 Centralizing Services on a Cisco Content Security Management Appliance
Configuring Centralized Reporting
Configuring Centralized Reporting
Before You Begin
•
Enable and configure centralized reporting on a Security Management appliance. See prerequisites
and instructions in the Cisco Content Security Management Appliance User Guide.
and instructions in the Cisco Content Security Management Appliance User Guide.
•
Ensure that sufficient disk space is allocated to the reporting service on the Security Management
appliance.
appliance.
Procedure
Step 1
Click Security Services > Reporting.
Step 2
In the Reporting Service section, select the Centralized Reporting option.
Step 3
Submit and commit your changes.
Requirements for Advanced Malware Protection Reporting
For required configurations for full reporting on Advanced Malware Protection (file reputation and file
analysis) features on the Security Management appliance, see the information about Advanced Malware
Protection reports in the email reporting chapter of the online help or user guide for your version of the
Security Management appliance software.
analysis) features on the Security Management appliance, see the information about Advanced Malware
Protection reports in the email reporting chapter of the online help or user guide for your version of the
Security Management appliance software.
Availability of Reporting Information after Changing to Centralized Reporting
When centralized reporting is enabled on an Email Security appliance:
•
Existing data on the Email Security appliance for the monthly report is not transferred to the
Security Management appliance.
Security Management appliance.
•
Archived reports on the Email Security appliance are not available.
•
The Email Security appliance stores only a week’s worth of data.
•
New data for the monthly and yearly reports is stored on the Security Management appliance.
•
Scheduled reports on the Email Security appliance are suspended.
•
You can no longer access the scheduled report configuration page on the Email Security appliance.
About Disabling Centralized Reporting
If you disable centralized reporting on the Email Security appliance, the Email Security appliance begins
storing new monthly report data, scheduled reports resume, and you can access its archived reports. After
disabling centralized reporting, the appliance only displays data for the past hour and day, but not the
past week or month. This is temporary. The appliance will display the reports for the past week and
month after it accumulates enough data. If the Email Security appliance is placed back into centralized
reporting mode, it will display data for the past week in the interactive reports.
storing new monthly report data, scheduled reports resume, and you can access its archived reports. After
disabling centralized reporting, the appliance only displays data for the past hour and day, but not the
past week or month. This is temporary. The appliance will display the reports for the past week and
month after it accumulates enough data. If the Email Security appliance is placed back into centralized
reporting mode, it will display data for the past week in the interactive reports.