IronPort - daily management guide - AsyncOS 7.6.1

More documents

Recommendations

Info

Managing Custom User Roles for Delegated Administration DLP Policies 8-30 Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide Chapter 8 Common Administrative Tasks If a delegated administrator deletes a content filter used by mail policies other than their own, or if the content filter is assigned to other custom user roles, AsyncOS does not delete the content filter from the system. AsyncOS instead unlinks the content filter from the custom user role and removes it from the delegated administrator’s mail policies. The content filter remains available to other custom user roles and mail policies. Delegated administrators can use any text resource or dictionary in their content filters, but they cannot access the Text Resources or Dictionaries pages in the GUI to view or modify them. Delegated administrators also cannot create new text resources or dictionaries. For outgoing mail policies, delegated administrators can enable or disable DLP policies but they cannot customize the DLP settings unless they also have DLP policy privileges. You can assign one of the following access levels for mail policies and content filters to a custom user role: No access: Delegated administrators cannot view or edit mail policies and content filters on the Email Security appliance. View assigned, edit assigned: Delegated administrators can view and edit the mail policies and content filters assigned to the custom user role and create new content filters. Delegated administrators can edit a policy’s Anti-Spam, Anti-Virus, and Outbreak Filters settings. They can enable their content filters for the policy, as well as disable any existing content filter assigned to the policy, regardless of whether they are responsible for it. Delegated administrators cannot modify a mail policy’s name or its senders, recipients, or groups. Delegated administrators can modify the order of the content filters for mail policies assigned to their custom user role. View all, edit assigned: Delegated administrators can view all mail policies and content filters on the appliance, but they can only edit the ones assigned to the custom user role. View all, edit all (full access): Delegated administrators have full access to all of the mail policies and content filters on the appliance, including the default mail policies, and have the ability to create new mail policies. Delegated administrators can modify the senders, recipients, and groups of all mail policies. They can also reorder mail policies. You can assign individual mail policies and content filters to the custom user role using either the Email Security Manager or the Custom User Roles for Delegated Administration table on the User Roles page. See the “Email Security Manager” chapter in the Cisco IronPort AsyncOS for Email Configuration Guide for more information on using the Email Security Manager for mail policies and content filters. See Updating Responsibilities for a Custom User Role, page 8-34 for information on using the Custom User Roles for Delegated Administration table to assign mail policies and content filters. The DLP Policies access privileges define a delegated administrator’s level of access to the DLP policies via the DLP Policy Manager on the Email Security appliance. You can assign DLP policies to specific custom user roles, allowing delegated administrators, in addition to operators and administrators, to manage these policies. Delegated administrators with DLP access can also export DLP configuration files from the Data Loss Prevention Global Settings page. Only administrators and operators can change the mode of DLP used from RSA Email DLP to RSA Enterprise Manager, and vise versa. If a delegated administrator also has mail policy privileges, they can customize the RSA Email DLP policies. Delegated administrators can use any custom DLP dictionary for their RSA Email DLP policies, but they cannot view or modify the custom DLP dictionaries. You can assign one of the following access levels for RSA Email DLP policies to a custom user role: OL-25138-01
Chapter 8 Common Administrative Tasks Email Reporting OL-25138-01 Managing Custom User Roles for Delegated Administration No access: Delegated administrators cannot view or edit RSA Email DLP policies on the Email Security appliance. View assigned, edit assigned: Delegated administrators can use the DLP Policy Manager to view and edit the RSA Email DLP policies assigned to the custom user role. Delegated administrators cannot rename or reorder DLP policies in the DLP Policy Manager. Delegated administrators can export DLP configurations. View all, edit assigned: Delegated administrators can view and edit the RSA Email DLP policies assigned to the custom user role. They can export DLP configurations. They can also view all RSA Email DLP policies that are not assigned to the custom user role but they cannot edit them. Delegated administrators cannot reorder DLP policies in the DLP Policy Manager or rename the policy. View all, edit all (full access): Delegated administrators have full access to all of the RSA Email DLP policies on the appliance, including the ability to create new ones. Delegated administrators can reorder DLP policies in the DLP Policy Manager. They cannot change the DLP mode that the appliance uses. You can assign individual RSA Email DLP policies to the custom user role using either the DLP Policy Manager or the Custom User Roles for Delegated Administration table on the User Roles page. See the “Data Loss Prevention” chapter in the Cisco IronPort AsyncOS for Email Advanced Configuration Guide for more information on RSA Email DLP policies and the DLP Policy Manager. See Updating Responsibilities for a Custom User Role, page 8-34 for information on using the Custom User Roles for Delegated Administration list to assign RSA Email DLP policies. The Email Reporting access privileges define which reports and Email Security Monitor pages a delegated administrator can view, depending on the custom user role’s access to mail policies, content filters, and RSA Email DLP policies. These reports are not filtered for assigned policies; delegated administrators can view reports for mail and DLP policies that for which they are not responsible. You can assign one of the following access levels for email reporting to a custom user role: No access: Delegated administrators cannot view reports on the Email Security appliance. View relevant reports: Delegated administrators can view reports on the Email Security Monitor pages related to their Mail Policies and Content Filters and DLP Policies access privileges. Delegated administrators with Mail Policies and Content Filters access privileges can view the following Email Security Monitor pages: – Overview – Incoming Mail – Outgoing Destinations – Outgoing Senders – Internal Users – Content Filters – Virus Outbreaks – Virus Types – Archived Reports Cisco IronPort AsyncOS 7.6 for Email Daily Management Guide 8-31
Page 1 and 2:
Cisco IronPort AsyncOS 7.6 for Emai
Page 3 and 4:
CHAPTER 1 Managing the Cisco IronPo
Page 5 and 6:
CHAPTER 4 Quarantines 4-1 OL-25138-
Page 7 and 8:
CHAPTER 5 Logging 5-1 OL-25138-01 M
Page 9 and 10:
OL-25138-01 Monitoring Detailed Ema
Page 11 and 12:
OL-25138-01 Managing Users 8-14 Add
Page 13 and 14:
OL-25138-01 CHAPTER 1 Managing the
Page 15 and 16:
Chapter 1 Managing the Cisco IronPo
Page 17 and 18:
Chapter 1 Managing the Cisco IronPo
Page 19 and 20:
OL-25138-01 Using Email Security Mo
Page 21 and 22:
Chapter 2 Using Email Security Moni
Page 23 and 24:
Page 25 and 26:
Page 27 and 28:
Page 29 and 30:
Page 31 and 32:
Page 33 and 34:
Page 35 and 36:
Page 37 and 38:
Page 39 and 40:
Page 41 and 42:
Page 43 and 44:
Page 45 and 46:
Page 47 and 48:
Page 49 and 50:
Page 51 and 52:
Page 53 and 54:
Page 55 and 56:
Page 57 and 58:
Page 59 and 60:
Page 61 and 62:
Page 63 and 64:
Page 65 and 66:
Page 67 and 68:
OL-25138-01 Tracking Email Messages
Page 69 and 70:
Chapter 3 Tracking Email Messages O
Page 71 and 72:
Chapter 3 Tracking Email Messages R
Page 73 and 74:
Chapter 3 Tracking Email Messages M
Page 75 and 76:
OL-25138-01 Quarantines CHAPTER 4 Q
Page 77 and 78:
Chapter 4 Quarantines OL-25138-01 M
Page 79 and 80:
Page 81 and 82:
Page 83 and 84:
Chapter 4 Quarantines Viewing Messa
Page 85 and 86:
Chapter 4 Quarantines OL-25138-01 F
Page 87 and 88:
Chapter 4 Quarantines Selecting a M
Page 89 and 90:
Chapter 4 Quarantines OL-25138-01 S
Page 91 and 92:
Chapter 4 Quarantines OL-25138-01 W
Page 93 and 94:
Chapter 4 Quarantines OL-25138-01 C
Page 95 and 96:
Chapter 4 Quarantines Cisco IronPor
Page 97 and 98:
Page 99 and 100:
Chapter 4 Quarantines Configuring S
Page 101 and 102:
Chapter 4 Quarantines OL-25138-01 S
Page 103 and 104:
Page 105 and 106:
Chapter 4 Quarantines Disk Space OL
Page 107 and 108:
Chapter 4 Quarantines Ensuring that
Page 109 and 110:
Page 111 and 112:
Chapter 4 Quarantines Deleting Mess
Page 113 and 114:
Chapter 4 Quarantines OL-25138-01 W
Page 115 and 116:
Chapter 4 Quarantines OL-25138-01 T
Page 117 and 118:
Chapter 4 Quarantines Method 2 OL-2
Page 119 and 120:
Chapter 4 Quarantines OL-25138-01 F
Page 121 and 122:
Overview OL-25138-01 Logging CHAPTE
Page 123 and 124:
Chapter 5 Logging OL-25138-01 Table
Page 125 and 126:
Page 127 and 128:
Chapter 5 Logging Logs Enabled by D
Page 129 and 130:
Chapter 5 Logging OL-25138-01 Infor
Page 131 and 132:
Chapter 5 Logging Successful Messag
Page 133 and 134:
Chapter 5 Logging Message with Atta
Page 135 and 136:
Chapter 5 Logging Using IronPort De
Page 137 and 138:
Chapter 5 Logging Successful Messag
Page 139 and 140:
Chapter 5 Logging Examples of Bounc
Page 141 and 142:
Page 143 and 144:
Chapter 5 Logging Domain Debug Log
Page 145 and 146:
Chapter 5 Logging Using IronPort CL
Page 147 and 148:
Chapter 5 Logging Using IronPort HT
Page 149 and 150:
Chapter 5 Logging Using IronPort An
Page 151 and 152:
Chapter 5 Logging Using IronPort LD
Page 153 and 154:
Chapter 5 Logging Safelist/Blocklis
Page 155 and 156:
Chapter 5 Logging Using Updater Log
Page 157 and 158:
Chapter 5 Logging Using Authenticat
Page 159 and 160:
Chapter 5 Logging Configuring Log S
Page 161 and 162:
Chapter 5 Logging Figure 5-1 Creati
Page 163 and 164:
Chapter 5 Logging Logging Message H
Page 165 and 166:
Chapter 5 Logging Rollover By File
Page 167 and 168:
Chapter 5 Logging Viewing Recent Lo
Page 169 and 170:
Chapter 5 Logging Configuring Host
Page 171 and 172:
Chapter 5 Logging OL-25138-01 - PRI
Page 173 and 174:
Chapter 5 Logging OL-25138-01 mail3
Page 175 and 176:
OL-25138-01 CHAPTER Managing and Mo
Page 177 and 178:
Chapter 6 Managing and Monitoring v
Page 179 and 180:
Page 181 and 182:
Page 183 and 184:
Page 185 and 186:
Page 187 and 188:
Page 189 and 190:
Page 191 and 192:
Page 193 and 194:
Page 195 and 196:
Page 197 and 198:
Page 199 and 200:
Page 201 and 202:
Page 203 and 204:
Page 205 and 206:
Page 207 and 208:
Page 209 and 210:
Page 211 and 212:
Page 213 and 214:
Page 215 and 216:
Page 217 and 218: Chapter 6 Managing and Monitoring v
Page 219 and 220: Chapter 6 Managing and Monitoring v
Page 221 and 222: OL-25138-01 Other Tasks in the GUI
Page 223 and 224: Chapter 7 Other Tasks in the GUI Ex
Page 225 and 226: Chapter 7 Other Tasks in the GUI OL
Page 239 and 240: OL-25138-01 CHAPTER Common Administ
Page 241 and 242: Chapter 8 Common Administrative Tas
Page 267: Chapter 8 Common Administrative Tas
Page 285 and 286: OL-25138-01 Testing and Troubleshoo
Page 287 and 288: Chapter 9 Testing and Troubleshooti
Page 317 and 318: A accessing 2-2 access privileges f
Page 319 and 320:
Injection Connection ID (ICID) 6-4
Page 321 and 322:
subject tagging 4-5 testing message
Page 323 and 324:
work queue, pausing 6-35 X XML 5-2,
show all

IronPort - daily management guide - AsyncOS 7.6.1

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?