IronPort - daily management guide - AsyncOS 7.6.1

Chapter 2 Using Email Security Monitor
System Quarantines
Virus Threat Level
OL-25138-01
Online
Resource Conservation
Delivery Suspended
Receiving Suspended
Work Queue Paused
Offline
See the Chapter 6, “Managing and Monitoring via the CLI” for more information.
Incoming Messages: The average rate of incoming mail per hour.
Work Queue: The number of messages awaiting processing in the work queue.
Click the System Status Details link to navigate to the System Status page.
Email Security Monitor Pages
This section displays information about the top three quarantines by disk usage on the appliance,
including the name of the quarantine, how full the quarantine is (disk space), and the number of
messages currently in the quarantine.
Click the Local Quarantines link to navigate to the Local Quarantines page.
This section shows the Outbreak status as reported by the Cisco IronPort Threat Operations Center
(TOC). For example, Figure 2-1 shows that a virus outbreak has been identified in the last 24 hours. Also
shown is the status of the Outbreak quarantine, including how full it is (disk space) and the number of
messages in the quarantine. The Outbreak quarantine is only displayed if you have enabled the Outbreak
Filters feature on your appliance.
Note In order for the Threat Level indicator to function, you need to have port 80 open on your firewall to
“downloads.ironport.com.” Alternatively, if you have specified a local update server, the Threat Level
indicator will attempt to use that address. The Threat Level indicator will also update correctly if you
have configured a proxy for downloads via the Service Updates page. For more information, see the
“System Administration” chapter in the Cisco IronPort AsyncOS for Email Configuration Guide.
Click the Outbreak Details link to view the external Cisco IronPort TOC web site. Note that in order for
this link to work, your Cisco IronPort appliance must be able to access the Internet. Note that the
Separate Window icon () indicates that a link will open in a separate window when clicked. You may
need to configure your browser’s pop-up blocker settings to allow these windows.
Incoming and Outgoing Summary and Graph
The Incoming and Outgoing summary sections provide access to real-time activity of all mail activity
on your system and is comprised of the Incoming and Outgoing Mail Graphs and Mail Summaries. You
can select the time frame on which to report via the Time Range menu. The time range you select is used
throughout all of the Email Security Monitor pages. The explanations of each type or category of
message are below (see Categorizing Email, page 2-6).
The mail trend graph (left side, Figure 2-2) shows the breakdown of incoming mail in real-time.
Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide
2-5