Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
Chapter 5 Tracking Email Messages
5-2
Cisco IronPort AsyncOS 7.2.0 for Security Management User Guide
OL-21768-01
•
Envelope information: Find messages from particular envelope senders or
recipients by entering the text strings to match.
recipients by entering the text strings to match.
•
Subject header: Match a text string in the subject line. Warning: Do not use
this type of search in environments where regulations prohibit such tracking.
this type of search in environments where regulations prohibit such tracking.
•
Time frame: Find a message that was sent between specified dates and times.
•
Sender IP address or rejected connections: Search for messages from a
particular IP address, or show rejected connections in the search results.
particular IP address, or show rejected connections in the search results.
•
Event: Find messages that match specified events, such as messages flagged
as virus positive, spam positive, or suspected spam, and messages that were
delivered, hard bounced, soft bounced, or sent to the Virus Outbreak
Quarantine.
as virus positive, spam positive, or suspected spam, and messages that were
delivered, hard bounced, soft bounced, or sent to the Virus Outbreak
Quarantine.
•
Message ID: Find messages by identifying the SMTP “Message-ID:” header
or the Cisco IronPort message ID (MID).
or the Cisco IronPort message ID (MID).
•
Email Security appliance (host): Narrow search criteria to particular Email
Security appliances, or search across all managed appliances.
Security appliances, or search across all managed appliances.
Understanding Tracking Query Setup
The Security Management appliance’s tracking service enables administrators to
search for a particular email message or group of messages that match specified
criteria, such as the message subject line, date and time range, envelope sender or
recipient, and processing event (for example, whether the message was virus
positive, spam positive, hard bounced, delivered, and so forth). Message tracking
gives administrators a detailed view of message flow. You can also drill down on
particular email messages to see message details, such as the processing events or
the envelope and header information.
search for a particular email message or group of messages that match specified
criteria, such as the message subject line, date and time range, envelope sender or
recipient, and processing event (for example, whether the message was virus
positive, spam positive, hard bounced, delivered, and so forth). Message tracking
gives administrators a detailed view of message flow. You can also drill down on
particular email messages to see message details, such as the processing events or
the envelope and header information.
Note
Although the tracking component provides detailed information about individual
email messages, you cannot use it to read the content of messages.
email messages, you cannot use it to read the content of messages.
To search for a specific email message or group of messages that match specified
criteria, perform the following:
criteria, perform the following: