ZyXEL Communications ZYWALL 35 User Manual page 545

Table 169 REPORTS > THREAT REPORTS > Anti-Spam (continued)
LABEL
Phishing Mail
Detected
No Score Mail
Detected
Mail Session
Forwarded
Mail Session
Blocked
Top Entry By
Score
Distribution
#
Sender Mail
Address
Source IP
Occurrences
Total
Spam
Threshold
Mail Count
Threshold
Score
Refresh
Flush
The statistics display as follows when you display the top entries by source.
ZyWALL 5/35/70 Series User's Guide
DESCRIPTION
This field displays the number of e-mails that the ZyWALL has classified as phishing.
This field displays the number of e-mails for which the ZyWALL did not receive a
spam score.
You can set the action that the ZyWALL takes when an e-mail session goes over the
threshold of concurrent sessions that the ZyWALL checks for spam.
This field displays the number of e-mail sessions that the ZyWALL allowed because
they exceeded the mail sessions threshold.
You can set the action that the ZyWALL takes when an e-mail session goes over the
threshold of concurrent sessions that the ZyWALL checks for spam.
This field displays the number of e-mail sessions that the ZyWALL stopped because
they exceeded the mail sessions threshold.
Select Top Entry by to list the top e-mail or IP addresses from which the ZyWALL
has detected the most spam.
Select Sender Mail Address to list the top e-mail addresses from which the
ZyWALL has detected the most spam.
Select Source to list the source IP addresses from which the ZyWALL has detected
the most spam.
Select Score Distribution to display the numbers of different spam scores of the e-
mails that the ZyWALL has checked.
This field displays the entry's rank in the list of the top entries.
This column displays when you display the entries by Sender Mail Address. This
column displays the e-mail addresses from which the ZyWALL has detected the
most spam.
This column displays when you display the entries by Source. It shows the source
IP address of spam e-mails that the ZyWALL has detected.
This column displays when you display the entries by Sender Mail Address or
Source. This field displays how many times the ZyWALL received spam from the
entry's e-mail address.
This field displays when you select Sender Mail Address or Source.
This field displays the sum of the occurrences of the events in the entries.
This field displays when you select Score Distribution.
This is the spam score for classifying e-mail as spam. Any e-mail with a spam score
higher than this number is classified as spam.
When you select Score Distribution, this table displays the distribution of e-mail
spam scores.
Each bar represents the number of e-mails that had a spam score close to the
threshold score listed at the bottom. The numbers on the left are numbers of e-mails.
Click Refresh to update the report display with additional information that the
ZyWALL may have collected while you had the screen open. The report also
refreshes automatically when you close and reopen the screen.
Click Flush to discard the report data and restart collecting statistics.
Chapter 30 Reports
545