Messaging Gateway

 View Only
  • 1.  Symantec Mail Security - Custom reports

    Posted Apr 12, 2010 11:01 AM
    Hi,

    Please let me know if we can create custom reports in Symantec mail security. I would like to generate a report which shows a report of all users who have sent mail to a specific domain.

    Thanks in advance..

    regards..
    raj


  • 2.  RE: Symantec Mail Security - Custom reports

    Broadcom Employee
    Posted Apr 12, 2010 04:34 PM
      |   view attached

    Read through Chapter 18 of the administration guide for how to do this:


    Attachment(s)



  • 3.  RE: Symantec Mail Security - Custom reports

    Posted Apr 12, 2010 05:45 PM

    JDavis - I'm not sure SBG 9 can do what's being asked.  I heard,  for a specific domain, show me who is sending e-mails to it.   Reports can do - top outbound domains, top senders, specific recipient (not rcpt domain, individual).  In any case, you'd get # of message for the domain and not the sender details.

    I think what is being asked for

    where direction is outbound, and recipient domain-part = "example.com" 
       select sender_email_address
       count by sender_email_address


    e.g.
    Mail sent to example.com

    bob@my.domain    10 msgs
    alice@may.domain 5 msgs


    Total messages sent 15

    The only way I know of to do something like this would be some shell code as Support account and then scp/ftp the data off box.  But you can't schedule that.

    There is an open source tool for Postfix that does execent reporting.  I'd like some of that type of reporting included in a future release.



  • 4.  RE: Symantec Mail Security - Custom reports

    Broadcom Employee
    Posted Apr 12, 2010 06:20 PM

    I would suggest that if you want more specific information about who sent what you should use a Message Audit Log query.


  • 5.  RE: Symantec Mail Security - Custom reports

    Posted Apr 12, 2010 07:45 PM

    Not practical or effective.

    1. You need to pull data for periods where you KNOW you won't get more that 1,000 records per scanner.
    2. You can't schedule it
    3. You still need to run it past excel to summarize. (and deal with the date format. at least sbg 9 lets you change that).
    4. Not repeatable - i've gotten different results depending on how I ask the question (e.g. a general query does not included all of the data a more specific query does.



  • 6.  RE: Symantec Mail Security - Custom reports

    Broadcom Employee
    Posted Apr 12, 2010 07:52 PM

    If this is something you need running all the time gathering this type of information you should create a compliance policy to start logging this as an informational incident.