Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 402
 
4-5
AsyncOS 8.3 for Cisco Content Security Management User Guide
 
Chapter 4      Using Centralized Email Security Reporting
  Working with Email Report Data
To print or export report information, see 
To understand the various interactive report pages, see 
.
To generate a report on demand, see 
To schedule reports to run automatically at intervals and times that you specify, see 
To view archived on-demand and scheduled reports, see 
For background information, 
To improve performance when working with large amounts of data, see 
To get details about an entity or number that appears as a blue link in a chart or table, click the entity 
or number. 
For example, if your permissions allow you to do so, you can use this feature to view details about 
messages that violate Content Filtering or Data Loss Prevention policies. This performs the relevant 
search in Message Tracking. Scroll down to view results. 
Searching and the Interactive Email Report Pages 
Many of the interactive email reporting pages include a ‘Search For:’ drop-down menu at the bottom of 
the page. 
From the drop-down menu, you can search for several types of criteria, including the following:
IP address
Domain
Network owner
Internal user
Destination domain
Internal sender domain
Internal sender IP address
Incoming TLS domain
Outgoing TLS domain
For most searches, choose whether to exactly match the search text or look for items starting with the 
entered text (for example, starts with “ex” will match “example.com”). 
For IPv4 searches, the entered text is always interpreted as the beginning of up to four IP octets in dotted 
decimal format. For example, ‘17’ will search in the range 17.0.0.0 through 17.255.255.255, so it will 
match 17.0.0.1 but not 172.0.0.1. For an exact match search, enter all four octets. IP address searches 
also support Classless Inter-Domain Routing (CIDR) format (17.16.0.0/12). 
For IPv6 searches, you can enter addresses using the formats in the following examples: 
2001:db8:2004:4202::0-2001:db8:2004:4202::ff
2001:db8:2004:4202::
2001:db8:2004:4202::23