Viewing information about email traffic processing events

Click the link in the upper part of the window to go to the Backup section and view the information about messages in Backup related to this event.

To view information about an email traffic processing event:

1. In the main window of the application web interface, open the management console tree and select the Events section.
2. Select the Mail traffic tab.

   Email traffic processing event information is displayed as a table.

3. Select the event for which you want to view information.

   This opens a window containing information about the event.

The information window for an email traffic processing event contains the following fields:

• Date and time is the date and time when the event occurred.
• Node is the IP address or port of the node where the message was processed.
• Sender email is the IP address of the message sender. The address is taken from the SMTP session (value of the MAIL FROM command).
• To is the address of the message recipient. Contains addresses from the SMTP session (values of the RCPT TO command) that occur in the To MIME header.
• CC is the address of the recipient of a copy of the message. Contains addresses from the SMTP session (values of the RCPT TO command) that occur in the Cc MIME header, but not in the To MIME header.
• BCC is the address of the recipient of a blind copy of the message. Contains addresses from the SMTP session (values of the RCPT TO command) that do not occur in either the To MIME header or the Cc MIME header.
• Subject is the message subject.
• Rule name is the name of the rule which caused the message to be processed.

  You can view rule details by clicking the link with the rule name.

• Action is the action that was performed on the message.
• The Scan result settings group displays statuses assigned to the message by each scanning module.
  • Anti-Virus:
    • Not scanned.
    • Not detected.
    • Encrypted.
    • Error.
    • Disinfected.
    • Infected.
  • Anti-Spam:
    • Not scanned.
    • Not detected.
    • Trusted.
    • Formal message.
    • Error.
    • Probable spam.
    • Denylist.
    • Spam.
    • Massmail.
  • Anti-Phishing:
    • Not scanned.
    • Not detected.
    • Error.
    • Phishing.
  • Links scanning:
    • Not scanned.
    • Not detected.
    • Error.
    • Detected.
    • Bases error.
  • Content Filtering:
    • Not scanned.
    • Not detected.
    • Size exceeded.
    • Banned file name.
    • Banned file format.
    • Error.
  • KATA:
    • Detected.
    • Error.
    • Not detected.
    • Not scanned.
    • Skipped.

    This is displayed only when KATA integration is configured.

• Attachment information:
  • File name.
  • File size (bytes).
  • File formats.

    The information about the file format is displayed if the format of the attached file is specified in a Content Filtering processing rule.

• Attachment scan result.

Page top