Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1219
 
28-12
Cisco AsyncOS 9.1 for Email User Guide
 
Chapter 28      Using Email Security Monitor
  Email Security Monitor Pages
Stopped by Recipient Throttling: This is a component of Stopped by Reputation Filtering. It represents 
the number of recipient messages stopped because any of the following HAT limits have been exceeded: 
maximum recipients per hour, maximum recipients per message, or maximum messages per connection. 
This is summed with an estimate of the recipient messages associated with rejected or TCP refused 
connections to yield Stopped by Reputation Filtering. 
Detected by Advanced Malware Protection: Messages with attachments that were found to be 
malicious by file reputation filtering. This value does not include verdict updates or files found to be 
malicious by file analysis. 
Total Threat: Total number of threat messages (stopped by sender reputation, stopped as invalid 
recipient, spam, plus virus). 
Show or hide columns by clicking the Column link at the bottom of the table. 
Sort the listing by clicking the column header links. A small triangle beside the column header indicates 
the column by which the data is currently sorted. 
Related Topics
“No Domain Information”
Domains which have connected to the appliance and could not be verified with a double-DNS lookup 
are automatically grouped into the special domain “No Domain Information.” You can control how these 
types of unverified hosts are managed via Sender Verification. See 
You can select the number of senders to show in the listing via the Items Displayed menu.
Querying for More Information
For senders listed in the Email Security Monitor table, click the sender (or “No Domain Information” 
link) to drill down for more information on the particular sender. The results are displayed on a Sender 
Profile page which includes real-time information from the SenderBase Reputation Service. From the 
Sender Profile page, you can drill down for more information on specific IP addresses or network owners 
(see 
).
You can also view another report, the Sender Groups report, by clicking the Sender Groups report link 
at the bottom of the Incoming Mail page. For more information about Sender Groups reports, see 
Reporting Pages Populated with Data: Sender Profile Pages
If you clicked a sender in the Incoming Mail Details table on an Incoming Mail page, the resulting 
Sender Profile page is listed with data for the particular IP address, domain, or organization (network 
owner). Sender Profile pages show detailed information for the sender. You can access a Sender Profile 
page for any network owner, domain, or IP address by clicking on the specified item in the Incoming 
Mail or other Sender Profile pages. Network owners are entities that contain domains; domains are 
entities that contain IP addresses. For more information on this relationship and how it relates to the 
SenderBase Reputation Service, see