ZyXEL Communications USG110, User Manual

Page: 256 / 1090

Chapter 7 Monitor
ZyWALL USG Series User’s Guide
256
7.35.2 The Anti-Spam Status Screen
Click Monitor > UTM Statistics > Anti-Spam > Status to display the Anti-Spam Status screen.
Spam Mails Detected by
IP Reputation This is the number of e-mails that the Zyxel Device has determined to be spam by IP
Reputation. Spam or Unwanted Bulk Email is determined by the sender’s IP address.
Spam Mails Detected by
Mail Content This is the number of e-mails that the Zyxel Device has determined to have malicious
contents.
Spam Mails Detected by
DNSBL The Zyxel Device can check the sender and relay IP addresses in an e-mail’s header
against DNS (Domain Name Service)-based spam Black Lists (DNSBLs). This is the
number of e-mails that had a sender or relay IP address in the header which matched
one of the DNSBLs that the Zyxel Device uses.
Spam Mails with Virus
Detected by Mail
Content This is the number of e-mails that the Zyxel Device has determined to have malicious
contents and attached with virus.
Virus Mails This is the number of e-mails that the Zyxel Device has determined to be attached with
virus.
Query Timeout This is how many queries that were sent to the Zyxel Device’s configured list of DNSBL
domains or Mail Scan services and did not receive a response in time.
When mail session threshold is reached
Mail Sessions Forwarded This is how many e-mail sessions the Zyxel Device allowed because they exceeded the
maximum number of e-mail sessions that the anti-spam feature can check at a time.
You can see the Zyxel Device’s threshold of concurrent e-mail sessions in the Anti-Spam
> Status screen.
Use the Anti-Spam > General screen to set whether the Zyxel Device forwards or drops
sessions that exceed this threshold.
Mail Sessions Dropped This is how many e-mail sessions the Zyxel Device dropped because they exceeded the
maximum number of e-mail sessions that the anti-spam feature can check at a time.
You can see the Zyxel Device’s threshold of concurrent e-mail sessions in the Anti-Spam
> Status screen.
Use the Anti-Spam > General screen to set whether the Zyxel Device forwards or drops
sessions that exceed this threshold.
Statistics
Top Sender By Use this field to list the top e-mail or IP addresses from which the Zyxel Device has
detected the most spam.
Select Sender IP to list the source IP addresses from which the Zyxel Device has
detected the most spam.
Select Sender Email Address to list the top e-mail addresses from which the Zyxel
Device has detected the most spam.
# This field displays the entry’s rank in the list of the top entries.
Sender IP This column displays when you display the entries by Sender IP . It shows the source IP
address of spam e-mails that the Zyxel Device has detected.
Sender Email Address This column displays when you display the entries by Sender Email Address . This column
displays the e-mail addresses from which the Zyxel Device has detected the most
spam.
Occurrence This field displays how many spam e-mails the Zyxel Device detected from the sender.
Table 79 Monitor > UTM Statistics > Anti-Spam > Summary (continued)
LABEL DESCRIPTION