McAfee MAP-3300-SWG Product Guide - Page 35

Report types, Filter types, Table 11, Option definitions

Page 35 highlights

Overview of Reports features Email Reports overview Report types The appliance comes with a set of reports with pre-defined filters available from the Favorites tab. You can run these reports immediately, or edit them using standard and advanced settings and save as a new favorite report to run again in the future, then make it available in the Scheduled Reports feature. To see the default settings in each report, hold your mouse cursor to the left of a report name. Table 11 Option definitions Option Email Overview Email Profile Top Spam Senders Top Viruses Legitimate Monitored Modified Rerouted Blocked Definition Displays results in Total view by default. Results show the number of legitimate, monitored, modified, rerouted, or blocked messages processed over the previous day. Displays results in Itemized view by default. Results show the number of items detected for each filter selection over the previous week. Displays results in Itemized view by default. Results are filtered using the Spam/Phish category by default, and show the spam or phish (or both) messages by sender over the previous 24 hours. Displays results in Itemized view by default. Results are filtered using the Viruses category by default, and show the viruses detected over the previous week, or results for a specific threat that you specify. Displays results in Time view by default. Results show the number of messages categorized as Legitimate (that is, delivered with no detection or modification) for all threat categories over the previous 24 hours. Displays results in Time view by default. Results show the number of messages for all threat categories over the previous 24 hours that triggered an event log but were delivered with no modification. Displays results in Time view by default. Results show the number of modified messages (for example, cleaned or replaced with an alert message) for all threat categories over the previous 24 hours. Displays results in Time view by default. Results show the number of messages routed to another server (for example, an encryption server) for all threat categories over the previous 24 hours. Displays results in Time view by default. Results show the number of inbound or outbound messages stopped by the appliance for all threat categories over the previous 24 hours. Filter types Each report allows you to filter the results by standard and advanced criteria. Table 12 Option definitions - Email Reports filter options Option Period and Ending Definition Displays information for a period from one hour to one month, based on the selected start date. When clicked, the Previous and Next buttons adjust the From date, for example, moving it to next week or the previous day. Protocol Traffic Displays the protocols you want to view, such as SMTP. Displays traffic, whether inbound or outbound. In a simple network, you might see reports on compliancy for outbound traffic and reports on spam for inbound traffic. McAfee Email and Web Security Appliances 5.6.0 Product Guide 35

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336

Report types
The appliance comes with a set of reports with pre-defined filters available from the
Favorites
tab. You
can run these reports immediately, or edit them using standard and advanced settings and save as a
new favorite report to run again in the future, then make it available in the
Scheduled Reports
feature.
To see the default settings in each report, hold your mouse cursor to the
left of a report name.
Table 11
Option definitions
Option
Definition
Email Overview
Displays results in
Total view
by default. Results show the number of legitimate,
monitored, modified, rerouted, or blocked messages processed over the previous day.
Email Profile
Displays results in
Itemized view
by default. Results show the number of items detected
for each filter selection over the previous week.
Top Spam
Senders
Displays results in Itemized view by default. Results are filtered using the Spam/Phish
category by default, and show the spam or phish (or both) messages by sender over
the previous 24 hours.
Top Viruses
Displays results in
Itemized view
by default. Results are filtered using the Viruses
category by default, and show the viruses detected over the previous week, or results
for a specific threat that you specify.
Legitimate
Displays results in
Time view
by default. Results show the number of messages
categorized as Legitimate (that is, delivered with no detection or modification) for all
threat categories over the previous 24 hours.
Monitored
Displays results in
Time view
by default. Results show the number of messages for all
threat categories over the previous 24 hours that triggered an event log but were
delivered with no modification.
Modified
Displays results in
Time view
by default. Results show the number of modified messages
(for example, cleaned or replaced with an alert message) for all threat categories
over the previous 24 hours.
Rerouted
Displays results in
Time view
by default. Results show the number of messages routed
to another server (for example, an encryption server) for all threat categories over
the previous 24 hours.
Blocked
Displays results in
Time view
by default. Results show the number of inbound or
outbound messages stopped by the appliance for all threat categories over the
previous 24 hours.
Filter types
Each report allows you to filter the results by standard and advanced criteria.
Table 12
Option definitions — Email Reports filter options
Option
Definition
Period
and
Ending
Displays information for a period from one hour to one month, based on the selected
start date.
When clicked, the
Previous
and
Next
buttons adjust the
From
date, for example, moving
it to next week or the previous day.
Protocol
Displays the protocols you want to view, such as SMTP.
Traffic
Displays traffic, whether inbound or outbound.
In a simple network, you might see reports on compliancy for outbound traffic and
reports on spam for inbound traffic.
Overview of Reports features
Email Reports overview
McAfee Email and Web Security Appliances 5.6.0 Product Guide
35