Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
Chapter 3 Using Centralized Email Reporting
3-12
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
Sort the listing by clicking the column header links. The sorting order is retained
when you switch between the summary and all views, regardless of whether the
sorted column exists in both views. In other words, if you sort the summary listing
by “Total Attempted” and then switch to the All view, the data will retain their
sorting.
when you switch between the summary and all views, regardless of whether the
sorted column exists in both views. In other words, if you sort the summary listing
by “Total Attempted” and then switch to the All view, the data will retain their
sorting.
These additional columns of data are summarized in the All view of the Sender
Details table:
Details table:
Connections Rejected: All connections blocked by HAT policies. When the
appliance is under heavy load, an exact count of rejected connections is not
maintained on a per-sender basis. Instead, rejected connections counts are
maintained only for the most significant senders in each time interval.
appliance is under heavy load, an exact count of rejected connections is not
maintained on a per-sender basis. Instead, rejected connections counts are
maintained only for the most significant senders in each time interval.
Connections Accepted: All connections accepted.
Stopped by Recipient Throttling: This is a component of Stopped by Reputation
Filtering. It represents the number of recipient messages stopped because any of
the following HAT limits have been exceeded: maximum recipients per hour,
maximum recipients per message, or maximum messages per connection. This is
summed with an estimate of the recipient messages associated with rejected or
TCP refused connections to yield Stopped by Reputation Filtering.
Filtering. It represents the number of recipient messages stopped because any of
the following HAT limits have been exceeded: maximum recipients per hour,
maximum recipients per message, or maximum messages per connection. This is
summed with an estimate of the recipient messages associated with rejected or
TCP refused connections to yield Stopped by Reputation Filtering.
Total Threat: Total number of threat messages (stopped by reputation, stopped as
invalid recipient, spam, plus virus).
invalid recipient, spam, plus virus).
“No Domain Information”
Domains that have connected to the Email Security appliances and could not be
verified with a double-DNS lookup are automatically grouped into the special
domain called “No Domain Information.” You can control how these types of
unverified hosts are managed via Sender Verification. For more information about
Sender Verification, see the Cisco IronPort AsyncOS for Email User Guide.
verified with a double-DNS lookup are automatically grouped into the special
domain called “No Domain Information.” You can control how these types of
unverified hosts are managed via Sender Verification. For more information about
Sender Verification, see the Cisco IronPort AsyncOS for Email User Guide.
You can use the Items Displayed menu to select the number of senders to display
in the list.
in the list.
Querying for More Information
For senders listed in the Incoming Mail Details section, click the Sender or No
Domain Information link to view for more information about the sender. The
results appear on a Sender Profile page, which includes real-time information
from the Cisco IronPort SenderBase Reputation Service. From the Sender Profile
Domain Information link to view for more information about the sender. The
results appear on a Sender Profile page, which includes real-time information
from the Cisco IronPort SenderBase Reputation Service. From the Sender Profile