Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 428
 
4-15
AsyncOS 9.5.x for Cisco Content Security Management Appliances User Guide
 
Chapter 4      Using Centralized Email Security Reporting
  Understanding the Email Reporting Pages
Note
If you have configured your anti-virus settings to deliver unscannable or encrypted messages, these 
messages will be counted as clean messages and not virus positive. Otherwise, the messages are counted 
as virus positive.
Additionally, if messages match a message filter and are not dropped or bounced by the filter, they are 
treated as clean. Messages dropped or bounced by a message filter are not counted in the totals.
Incoming Mail Page
The Email > Reporting > Incoming Mail page on the Security Management appliance provides 
interactive reporting on the real-time information for all remote hosts connecting to your managed 
Security Management appliances. You can gather information about the IP addresses, domains, and 
network owners (organizations) sending mail to your system. You can also perform a Sender Profile 
search on IP addresses, domains, or organizations that have sent mail to you.
The Incoming Mail Details interactive table displays detailed information about the particular IP 
address, domain, or network owner (organization). You can access a Sender Profile page for any IP 
address, domain, or network owner by clicking the corresponding link at the top of the Incoming Mail 
page, or on other Sender Profile pages. 
From the Incoming Mail pages you can: 
Perform a search on IP addresses, domains, or network owners (organizations) that have sent mail 
to your Security Management appliances. See 
View the Sender Groups report to monitor connections according to the specific sender group and 
mail flow policy actions. See the 
 for more 
information.
See detailed statistics on senders that have sent mail to your appliances. The statistics include the 
number of attempted messages broken down by security service (sender reputation filtering, 
anti-spam, anti-virus, and so forth). 
Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam 
or anti-virus security services.
Use the SenderBase Reputation Service to examine the relationship between specific IP addresses, 
domains, and organizations to obtain information about a sender. 
Obtain more information about a sender from the SenderBase Reputation Service, including a 
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most 
recently. Add senders to sender groups.
Obtain more information about a specific sender who has sent a high volume of spam or virus email, 
as determined by the anti-spam or anti-virus security services.
Views Within the Incoming Mail Page
The Incoming Mail page has three different views: 
IP Addresses
Domains
Network Owners