MFC Report numbers vs. Individual appliance numbers
Hi, Can one of the IronPort folks comment on the difference between the numbers I see in reports generated for a server by MFC vs. the numbers I see in reports generated directly from that server? When I look at the MFC-generated report ('E-mail Volume Report') in comparison to the 'Incoming Mail Daily Summary' report generated from the box itself, they don't seem to match up. I realize they show some different types of numbers, but the ones that I think should be relatively the same, don't seem to be. For example, looking at the 'Daily Summary' report from the box, it says we received 56K SPAM detected messages. However, if I look at the MFC report for that same box, it totals 38K SPAM postive & suspected. Also, the 'Daily Summary' shows 168K clean messages, while the MFC shows about 300K (after filtering out the spam/virus numbers).
I guess what I'm looking for is an explanation of the difference between the 2 reports and which is more accurate for reporting to management. For example, using the 'Daily Summary' report, I see 1.5M attempted msgs, 1.4M total threat messages, and 168K 'clean' messages. This is pretty much the norm, and I want to know if it's what's really going on. If this is documented somewhere, I haven't been able to find it.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...