ZyXEL Communications 5 Series User Manual

Page 501

ZyWALL 5/35/70 Series User’s Guide

Chapter 29 Reports

501

The statistics display as follows when you display the top entries by source.

Spam Mail
Detected

This field displays the number of e-mails that the ZyWALL has classified as spam.

Phishing Mail
Detected

This field displays the number of e-mails that the ZyWALL has classified as phishing.

No Score Mail
Detected

This field displays the number of e-mails for which the ZyWALL did not receive a
spam score.

Mail Session
Forwarded

You can set the action that the ZyWALL takes when an e-mail session goes over the
threshold of concurrent sessions that the ZyWALL checks for spam.

This field displays the number of e-mail sessions that the ZyWALL allowed because
they exceeded the mail sessions threshold.

Mail Session
Blocked

You can set the action that the ZyWALL takes when an e-mail session goes over the
threshold of concurrent sessions that the ZyWALL checks for spam.

This field displays the number of e-mail sessions that the ZyWALL stopped because
they exceeded the mail sessions threshold.

Top Entry By

Select Top Entry by to list the top e-mail or IP addresses from which the ZyWALL
has detected the most spam.

Select Sender Mail Address to list the top e-mail addresses from which the ZyWALL
has detected the most spam.

Select Source to list the source IP addresses from which the ZyWALL has detected
the most spam.

Score
Distribution

Select Score Distribution to display the numbers of different spam scores of the e-
mails that the ZyWALL has checked.

This field displays the entry’s rank in the list of the top entries.

Sender Mail
Address

This column displays when you display the entries by Sender Mail Address. This
column displays the e-mail addresses from which the ZyWALL has detected the most
spam.

Source IP

This column displays when you display the entries by Source. It shows the source IP
address of spam e-mails that the ZyWALL has detected.

Occurrences

This column displays when you display the entries by Sender Mail Address or
Source. This field displays how many times the ZyWALL received spam from the
entry’s e-mail address.

Total

This field displays when you select Sender Mail Address or Source.

This field displays the sum of the occurrences of the events in the entries.

Spam Threshold This field displays when you select Score Distribution.

This is the spam score for classifying e-mail as spam. Any e-mail with a spam score
higher than this number is classified as spam.

Mail Count

Threshold Score

When you select Score Distribution, this table displays the distribution of e-mail
spam scores.

Each bar represents the number of e-mails that had a spam score close to the
threshold score listed at the bottom. The numbers on the left are numbers of e-mails.

Refresh

Click Refresh to update the report display with additional information that the
ZyWALL may have collected while you had the screen open. The report also
refreshes automatically when you close and reopen the screen.