Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
4-13
AsyncOS 8.1 for Cisco Content Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Following these rules, if a message is marked as spam positive, and your anti-spam settings are set to
drop spam positive messages, the message is dropped and the spam counter is incremented.
drop spam positive messages, the message is dropped and the spam counter is incremented.
Further, if your anti-spam settings are set to let the spam positive message continue on in the email
pipeline, and a subsequent content filter drops, bounces, or quarantines the message, the spam count is
still incremented. The content filter count is only incremented if the message is not spam or virus
positive.
pipeline, and a subsequent content filter drops, bounces, or quarantines the message, the spam count is
still incremented. The content filter count is only incremented if the message is not spam or virus
positive.
Categorizing Email Messages on the Overview Page
Messages reported on the Overview page are categorized as follows:
Table 4-4
Email Categories on Overview Page
Category
Description
Stopped by
Reputation Filtering
Reputation Filtering
All connections blocked by HAT policies multiplied by a fixed multiplier (see
the
the
) plus
all recipients blocked by recipient throttling.
The Stopped by Reputation Filtering total on the Overview page is always
based on a complete count of all rejected connections. Only the per-sender
connection counts are limited due to load.
based on a complete count of all rejected connections. Only the per-sender
connection counts are limited due to load.
Invalid Recipients
All mail recipients rejected by conversational LDAP rejection plus all RAT
rejections.
rejections.
Spam Messages
Detected
Detected
The total count of messages detected by the anti-spam scanning engine as
positive or suspect. Additionally, messages that are both spam and virus
positive.
positive or suspect. Additionally, messages that are both spam and virus
positive.
Virus Messages
Detected
Detected
The total count and percentage of messages detected as virus positive and not
also spam.
also spam.
The following messages are counted in the “Virus Detected” category:
•
Messages with a virus scan result of “Repaired” or “Infectious”
•
Messages with a virus scan result of “Encrypted” when the the option to
count encrypted messages as containing viruses is selected
count encrypted messages as containing viruses is selected
•
Messages with a virus scan result of “Unscannable” when the action for
unscannable messages is NOT “Deliver”
unscannable messages is NOT “Deliver”
•
Messages with a virus scan result of “Unscannable” or “Encrypted”
when the option to deliver to an alternate mail host or an alternate
recipient is selected
when the option to deliver to an alternate mail host or an alternate
recipient is selected
•
Messages that are deleted from the Outbreak quarantine, either manually
or by timing out.
or by timing out.
Stopped by Content
Filter
Filter
The total count of messages that were stopped by a content filter.