Manuals / Surf Control / Power Tools / Welder

Surf Control 5.2.4 manual Querying the Connection Report

Models: 5.2.4

1 182

Download 182 pages 55.76 Kb

Page 119

4

REPORTS & LOGS

Connection Report

CONNECTION REPORT

The Connection Report provides statistical information on connections made and released by RiskFilter. It includes connection data relating to real-time blacklist, block host, directory attack, reverse DNS lookup and connection limit, as well as attachment scanning, SPF and SMTP delay.

RiskFilter automatically lists the top 10 IP addresses accepted and rejected as well as the number of connections and the size of data sent through respective IP addresses.

QUERYING THE CONNECTION REPORT

There are two ways in which you can query the Connection report:

•Query the number of connections made and released on the current date, or alternatively, over a certain period of time for the selected year, month and date for a particular domain.

•Use keywords to browse and retrieve records of connections.

Figure 4 - 8 Connection Report

•Browse Log – View and download the records of connections. You can specify the keyword such as Release Date, Release Time etc., to retrieve records of Connection messages.

•View Report – First, specify criteria for a report by selecting items from the drop-down lists at the top of the page then click View Report.

•Today’s Report – Shows you all messages since 12.00am this morning.

The report shows the following information:

•Total Connections – How many connections were made in the specified period.

114 Administrator’s Guide

SurfControl RiskFilter - E-mail V5.2.4

Image 119

Surf Control 5.2.4 manual Querying the Connection Report

Contents

SurfControl RiskFilter E-mail Contents Policy Manager Riskfilter System Management Console Appendix Chapter Managing Your Messages with Riskfilter HOW Riskfilter WorksRelay Control ConnectionControl Mail Exchanger IP Address MX Preference Load Balancing with RiskfilterLoad balancing with RiskFilter Https//hostnameoripaddress10000 Launching Surfcontrol RiskfilterRiskfilter System Management Console Opening the RiskFilter Management Console Riskfilter Management Console AdministratorHttps//hostnameoripaddress/admin Before YOU Start System Settings Terminology Used System Settings TABWhat can be Configured in the System Settings TAB? Postmaster e-mail address ConfigurationSelect General Configuration from the System Settings tab GeneralSmtp greeting Other SettingsAdmin Console Session TimeoutEditing User Directories User DirectoriesOpen the User Directories screen Deleting a User DirectoryClick Add in the User Directories screen Microsoft Active DirectorySelect IBM Ldap Server IBM Ldap serverClick Add in the User Directories screen Select Generic Ldap Generic LdapEsmtp Server Information Validation settingsLocal Database Recipient FileTo add a local database Click Add Local Database Add/Edit Address screen is displayed Select General Secure Proxy from the System Settings tabSecure Proxy Select Enable Imap Proxy Select Enable POP3 ProxySelect Enable Webmail Proxy Logs and Archives Setting up the storage directoriesSelect General Directories from the System Settings tab Notifications CertificateCertificate Signing Request Select General Certificate from the System Settings tabImporting Certificates Exporting CertificatesConnection Control Receive SettingsConnection Settings Allow Access List Smtp Greeting Delay16 The Directory Attack Control screen Directory Attack ControlControlling relaying of messages SPF Authentication ConfigurationRelay Control Allowing relaying to specific domains Relay for Internal Senders Add validation servers Recipient ValidationAdding details of domains 19 The Message Control screen Message Control20 Set what action is taken on messages Exception ControlTo configure exception control Adding an IP or subnet address to the blacklist Black ListAdding domain or e-mail addresses to the blacklist Importing and exporting ListsDynamic White List White ListAdding an IP or subnet address to the White List Receive Settings Delivering the messages Send SettingsSetting up the destination domains DOMAIN-BASED DeliverySelect Forward mail to the following Smtp servers Using TLS authentication Transport Layer SecurityAdvanced Delivery Traffic ControlSend Settings Account Manager User ManagementSpecifying Administrator Access Changing the Administrator Account PasswordSetting up Administrator Access Select Account Manager from the User Management menu Editing Administrator AccountsPersonal E-MAIL Manager Setting up the PEM message 31 What the user sees Personal E-mail Manager Importing lists of users Adding usersExporting lists of users User List End-user Bypass Anti-Spam SettingSetting up End User Control END-USER ControlAuthenticating PEM users User AuthenticationAuthenticating remote users Update NOW License & UpdatesAVA and ASA License Expired Updating your Anti-Spam Agent DefinitionsUpdating the Anti-Virus Agent Scheduled UpdateSelect the Anti-Virus Agent Update check box Updating Component Licenses Select the Anti-Spam Agent Update check boxLicense Status Updating the Anti-Spam AgentViewing component licenses Update ServerManually setting up a license server User Number Exceeded License ServerSubmitting a Support Request Admin Guide Contact SupportSelect Help Contact Support from the System Settings tab HelpConfiguration Wizard Firstboot WizardKEY Points Key Points Policy Manager Policy Manager TAB What can be Configured in the Policy Manager TAB?Defining the Action Creating a PolicyDefining Users Global Policy Filter List Defining the RulesImporting and Exporting Lists Address GroupDeleting Address Groups Adding Queues Queue ManagerSelect Queue Manager from the Policy Manager tab Editing a QueueEditing SurfControl Dictionary properties Dictionary ManagerSurfcontrol Dictionaries Deleting a word or phrase Changing the value of words in the SurfControl DictionariesAdding words to the SurfControl Dictionaries Create a new dictionary Custom DictionariesImporting a SurfControl Dictionary Pack Importing DictionariesWorthlesstab space15 balancetab space10 Creating a unicode text fileSelect Import from a Unicode text file Importing a unicode text fileExporting a dictionary Creating a NEW SUB-POLICY Global Policy15 Enter the details of the new Sub-policy Select Global Policy from the Policy Manager tabAdding Filters to the Policy Editing a SUB-POLICYDeleting a SUB-POLICY 18 The Global Policy Filter List screen Defining a FilterSelect Global Policy Filters from the Policy Manager tab ANTI-VIRUS Agent FilterCreating a new filter Editing the Anti-Virus Agent FilterGlobal Policy Select Anti-Spam Agent DFP ANTI-SPAM Agent FiltersSelect Anti-Spam Agent Heuristics Configuring the Anti-Spam Agent Heuristics FilterSelect Anti-Spam Agent LexiRules Configuring the Anti-Spam Agent LexiRules Filter23 The Internet Threat Database Filter screen Internet Threat Database FilterSelect the Internet Threat Database Filter and click Next Standard DisclaimerEditing the Internet Threat Database Filter Select the Standard Disclaimer Filter Editing the Standard Disclaimer FilterSelect the General Content Filter and click Next General Content FilterEditing the General Content Filter Select the Advanced Content Filter and click Next Advanced Content FilterEditing the Advanced Content Filter 27 The Expression screen Using the Expression ListUsing Logical Operators Occur gateway Assume Frequency =2 Examples showing the use of OperandsRiskFilter and Gateway and Innovation RiskFilter or Gateway or Innovation28 Message Attachment Filter screen Message Attachment FilterSelect the Message Attachment Filter and click Next Editing the Message Attachment FilterSelect the Internet Content Guardian Filter and click Next Content GuardianCreating a new Content Guardian filter Adding a filtering rule How the Dictionary Threshold Filter works Dictionary Threshold FilterDeleting a filtering rule Select the Dictionary Threshold Filter and click Next Configuring the Dictionary Threshold FilterGlobal Policy KEY Points Key Points Reports & Logs Reports and Logs TAB What can be Configured in the Reports and Logs TAB?Server status monitoring DashboardSelect Specified date range from the Logs for list box Master ReportQuerying the Master Report Select Master Report from the Reports and Logs tabMaster Report Querying the Message Report Message ReportQuerying the Policy Report Policy ReportQuerying the Virus Report Virus ReportQuerying the Spam Report Spam ReportQuerying the Connection Report Connection ReportConnection Report System Report Click View Messages Isolated MessagesManaging Isolated Messages Select Isolated Messages from the Reports and Logs tabIsolated Messages Select Virus Messages from the Reports and Logs tab Virus MessagesManaging the Virus Messages 14 An Archived message Select Spam Messages from the Reports and Logs tab Spam MessagesManaging Spam Messages To view a message click the subject Select Archived Messages from the Reports and Logs tab Archived MessagesManaging Archived Messages Export Messages Click Reprocess Messages Reprocess MessagesView Messages 19 Select the check box alongside the message Select Deferred Messages from the Reports and Logs tab Deferred MessagesQuerying Deferred Messages 22 An Archived message KEY Points Key Points RiskFilter System Management Console Overview What can be Configured with the System Management CONSOLE?Rfmngr Account Accessing the Riskfilter System Management ConsoleWebmin TAB What can be Configured in the Webmin TAB?Webmin Actions LOG Webmin ConfigurationIP access control Select Webmin Configuration from the Webmin tabPorts and Addresses Select Language from the Webmin Configuration screenSelect Logging from the Webmin Configuration screen LanguageSelect Webmin Servers Index in the Webmin Webmin Servers IndexProxy Servers Adding Webmin ServersSystem TAB What can be Configured in the System TAB?Historic System Statistics Bootup and ShutdownChange Passwords Select Change Passwords in the System tabSelect Multi Gateway Policy Routing in the System tab Multi Gateway Policy RoutingNetwork Interfaces Network ConfigurationEnter an IP Address Multi-NIC configuration in RiskFilterSetting up additional NICs Routing and Gateways 11 The Create Bootup Interface screenDNS Client Select DNS Client from the Network Configuration tab15 Host Addresses Host AddressesSelect System Time in the System tab Running ProcessesSystem Time Click Sync system time System and Server StatusRiskfilter TAB What can be Configured in the Riskfilter TAB?Riskfilter Backup Manager Riskfilter Services ManagerClick Complete Riskfilter Cluster Wizard25Load balancing Load balancing with RiskFilter26 RiskFilter in a cluster set up Select Web Access Manager in the RiskFilter tab Riskfilter WEB Access Manager28 The Update RiskFilter-E-mail screen Update Riskfilter E-MAILKEY Points Key Points Appendix # sudo /etc/init.d/smgd status Using the Command Line InterfaceQTOOL.SH Clean queuesUsing the Command Line Interface Using the Command Line Interface Using the Command Line Interface Example 6 uninstalling the RiskFilter software UNINSTALL.SHAll items were successfully uninstalled Productivity Categories Internet Threat Database CategoriesInternet Theat Database Categories Core / Liability CategoriesCore / Liability Categories Productivity Categories Other Special EventsIndex Administrator’s Guide SurfControl RiskFilter E-mail SurfControl RiskFilter E-mail Administrator’s Guide OpenSSL Sun RPC Apache Software License, Version Expat XML Parser Toolkit SPFJava Ldap