The Email Security Status Screen - ZyXEL Communications ZyWall ATP series User Manual

Table 63 Monitor > Security Statistics > Email Security > Summary (continued)
LABEL
Spam Mails Detected by
IP Reputation
Spam Mails Detected by
Mail Content
Spam Mails Detected by
Phishing
Spam Mails Detected by
DNSBL
Spam Mails with Virus
Detected by Mail
Content
Virus Mails
Query Timeout
When mail session threshold is reached
Mail Sessions Forwarded
Mail Sessions Dropped
Statistics
Top Sender By
#
Sender IP
Sender Email Address
Occurrence

6.32.2 The Email Security Status Screen

Click Monitor > Security Statistics > Email Security > Status to display the Email Security Status screen.
Chapter 6 Monitor
DESCRIPTION
This is the number of emails that the Zyxel Device has determined to be spam by IP
Reputation. Spam or Unwanted Bulk Email is determined by the sender's IP address.
This is the number of emails that the Zyxel Device has determined to have malicious
contents.
This is the number of emails that the Zyxel Device has determined to be spam sent by
phishing websites.
The Zyxel Device can check the sender and relay IP addresses in an email's header
against DNS (Domain Name Service)-based spam Black Lists (DNSBLs). This is the
number of emails that had a sender or relay IP address in the header which matched
one of the DNSBLs that the Zyxel Device uses.
This is the number of emails that the Zyxel Device has determined to have malicious
contents and attached with virus.
This is the number of emails that the Zyxel Device has determined to be attached with
virus.
This is how many queries that were sent to the Zyxel Device's configured list of DNSBL
domains or Mail Scan services and did not receive a response in time.
This is how many email sessions the Zyxel Device allowed because they exceeded the
maximum number of email sessions that the email security feature can check at a time.
You can see the Zyxel Device's threshold of concurrent email sessions in the Email
Security > Status screen.
Use the Email Security > Summary screen to set whether the Zyxel Device forwards or
drops sessions that exceed this threshold.
This is how many email sessions the Zyxel Device dropped because they exceeded the
maximum number of email sessions that the email security feature can check at a time.
You can see the Zyxel Device's threshold of concurrent email sessions in the Email
Security > Status screen.
Use the Email Security > Summary screen to set whether the Zyxel Device forwards or
drops sessions that exceed this threshold.
Use this field to list the top email or IP addresses from which the Zyxel Device has
detected the most spam.
Select Sender IP to list the source IP addresses from which the Zyxel Device has
detected the most spam.
Select Sender Email Address to list the top email addresses from which the Zyxel Device
has detected the most spam.
This field displays the entry's rank in the list of the top entries.
This column displays when you display the entries by Sender IP. It shows the source IP
address of spam emails that the Zyxel Device has detected.
This column displays when you display the entries by Sender Email Address. This column
displays the email addresses from which the Zyxel Device has detected the most spam.
This field displays how many spam emails the Zyxel Device detected from the sender.
ZyWALL ATP Series User's Guide
168