Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 402
 
4-17
AsyncOS 8.3 for Cisco Content Security Management User Guide
 
Chapter 4      Using Centralized Email Security Reporting
  Understanding the Email Reporting Pages
You can use the Items Displayed menu to select the number of senders to display in the list.
Time Ranges in the Mail Trend Graphs
You can select varying degrees of granularity to see your data in a mail graph. You can select a day, week, 
month, and year views of the same data. Because the data is monitored in real time, information is 
periodically updated and summarized in the database. 
For more information on time ranges, see 
.
Incoming Mail Details Table
The interactive Incoming Mail Details table at the bottom of the Incoming Mail page lists the top 
senders that have connected to public listeners on the Email Security appliances. The table shows 
domains, IP addresses, or network owners, based on the view selected. Click the column headings to sort 
the data. 
The system acquires and verifies the validity of the remote host’s IP address by performing a double DNS 
lookup
. For more information about double DNS lookups and sender verification, see the documentation 
or online help for your Email Security appliance.
For senders, that is Network Owner, IP Address or Domain, listed in the first column of the Incoming 
Mail Details table, or on the Top Senders by Total Threat Messages, click the Sender or No Domain 
Information
 link to view more information about the sender. The results appear on a Sender Profile 
page, which includes real-time information from the SenderBase Reputation Service. From the Sender 
Profile page, you can view for more information about specific IP addresses or network owners. For 
more information, see the 
You can also view the Sender Groups report, by clicking Sender Groups report at the bottom of the 
Incoming Mail page. For more information about the Sender Groups report page, see th
If your access privileges allow you to view Message Tracking data: To view Message Tracking details 
for the Content Filter violations in this report, click a blue number link in the table.
Sender Profile Pages
When you click a sender in the Incoming Mail Details interactive table, on the Incoming Mail page, the 
Sender Profile page appears. It shows detailed information about the particular IP address, domain, or 
network owner (organization). You can access a Sender Profile page for any IP address, domain, or 
network owner by clicking the corresponding link on the Incoming Mail page or on other Sender Profile 
pages. 
Network owners are entities that contain domains. Domains are entities that contain IP addresses. 
The Sender Profile pages displayed for IP addresses, domains, and network owners vary slightly. For 
each, the page contains a graph and summary table for incoming mail from the particular sender. Below 
the graph, a table lists the domains or IP addresses associated with the sender. (The Sender Profile page 
for an individual IP address does not contain a more granular listing.) The Sender Profile page also 
includes an information section with the current SenderBase, sender group, and network information for 
the sender.
Network Owner profile pages contain information for the network owner, as well as the domains and 
IP addresses associated with that network owner. 
Domain profile pages contain information for the domains and IP addresses associated with that 
domain.