27.11.2012 Views

IronPort - daily management guide - AsyncOS 7.6.1

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Email Security Monitor Pages<br />

Incoming Mail<br />

2-8<br />

Cisco <strong>IronPort</strong> <strong>AsyncOS</strong> 7.6 for Email Daily Management Guide<br />

Chapter 2 Using Email Security Monitor<br />

The Incoming Mail page extends to include a group of pages (Incoming Mail, Sender Profiles, and the<br />

Sender Group Report). From the Incoming Mail pages, you can:<br />

Perform a search on IP addresses, domains, or organizations (network owners) that have sent mail<br />

to you.<br />

View the Sender Groups report to see connections via a specific sender group and mail flow policy<br />

actions. See Sender Groups Report, page 2-16 for more information.<br />

See detailed statistics on senders which have sent mail to you, including the number of attempted<br />

messages broken down by security service (reputation filtering, anti-spam, anti-virus, etc.).<br />

Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam<br />

or anti-virus security services.<br />

Use the Cisco <strong>IronPort</strong> SenderBase Reputation service to drill down on and examine the relationship<br />

between specific IP addresses, domains, and organizations to obtain more information about a<br />

sender.<br />

Drill down on specific senders to obtain more information about a sender from the Cisco <strong>IronPort</strong><br />

SenderBase Reputation Service, including a sender’s SenderBase Reputation Score and which<br />

sender group the domain matched most recently. Add senders to sender groups.<br />

Drill down on a specific sender who sent a high volume of spam or virus email, as determined by<br />

the anti-spam or anti-virus security services.<br />

Once you have gathered information on a domain, you can add the IP address, domain, or<br />

organization to an existing sender group (if necessary) by clicking “Add to Sender Group” from a<br />

domain, IP address, or network owner profile page. See the “Configuring the Gateway to Receive<br />

Email” chapter in the Cisco <strong>IronPort</strong> <strong>AsyncOS</strong> for Email Configuration Guide.<br />

The Incoming Mail page provides access to real-time activity of all public listeners configured on your<br />

system and is comprised of two main sections: the mail trend graphs summarizing the top domains<br />

received (by total threat messages and by total clean messages) and the Incoming Mail Details listing.<br />

OL-25138-01

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!