Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
4-16
AsyncOS 8.1 for Cisco Content Security Management User Guide
Chapter 4 Using Centralized Email Security Reporting
Categorizing Email Messages on Incoming Mail Page
Messages reported on the Incoming Mail page are categorized as follows:
Table 4-5
Email Categories on Incoming Mail Page
Category
Description
Stopped by Reputation Filtering
All connections blocked by HAT policies multiplied by a
fixed multiplier (see the
fixed multiplier (see the
) plus all recipients blocked by
recipient throttling.
The value for Stopped by Reputation Filtering is calculated
based on several factors:
based on several factors:
•
Number of “throttled” messages from this sender
•
Number of rejected or TCP refused connections (may be
a partial count)
a partial count)
•
A conservative multiplier for the number of messages per
connection
connection
When the appliance is under heavy load, an exact count of
rejected connections is not maintained on a per-sender basis.
Instead, rejected connections counts are maintained only for
the most significant senders in each time interval. In this
situation, the value shown can be interpreted as a “floor”; that
is, at least this many messages were stopped.
rejected connections is not maintained on a per-sender basis.
Instead, rejected connections counts are maintained only for
the most significant senders in each time interval. In this
situation, the value shown can be interpreted as a “floor”; that
is, at least this many messages were stopped.
Invalid Recipients
All mail recipients rejected by conversational LDAP
rejection plus all RAT rejections.
rejection plus all RAT rejections.
Spam Messages Detected
The total count of messages detected by the anti-spam
scanning engine as positive or suspect. Additionally,
messages that are both spam and virus positive.
scanning engine as positive or suspect. Additionally,
messages that are both spam and virus positive.
Virus Messages Detected
The total count and percentage of messages detected as virus
positive and not also spam.
positive and not also spam.
Stopped by Content Filter
The total count of messages that were stopped by a content
filter.
filter.
If your access privileges allow you to view Message Tracking
data: To view Message Tracking details for the Content Filter
violations in this report, click a blue number link in the table.
data: To view Message Tracking details for the Content Filter
violations in this report, click a blue number link in the table.
Marketing Messages
The total count and percentage of messages detected as
unwanted marketing messages. This list item appears on the
page only if marketing data are present in the system
unwanted marketing messages. This list item appears on the
page only if marketing data are present in the system
Clean Messages Accepted
Mail that is accepted and that is deemed to be virus and spam
free — the most accurate representation of clean messages
accepted when taking per recipient scanning actions (such as
splintered messages being processed by separate mail
policies) into account. However, because messages that are
marked as spam or virus positive and still delivered are not
counted, the actual number of messages delivered may differ
from the clean message count.
free — the most accurate representation of clean messages
accepted when taking per recipient scanning actions (such as
splintered messages being processed by separate mail
policies) into account. However, because messages that are
marked as spam or virus positive and still delivered are not
counted, the actual number of messages delivered may differ
from the clean message count.