Email Activity Report Examples
Overview
The Email Activity folder allows system administrators to run top level reports and to then drill down to find specific information about email traffic flowing through the eSoft device. Please note that the amount of email traffic, the date range being reported and the speed of the client machine will all affect the speed at which various reports are displayed.
Searching for a Missing Email
The most commonly reported issue with email is when an end user did not receive an expected email. The quickest way to determine what happened to a missing email is to use the Search option in the Email Activity folder. From this search a system administrator can generate reports on all emails for specific email addresses or domains during a certain time period and determine how the system handled those emails. To access these additional reporting features simply click on the Search button at the top of the Email Activity folder, as highlighted below.
Once the Search dialog box loads enter the senders email address or domain name. In the example below the information used to limit the displayed results was the senders email domain (test.com). Once Search was selected all of the applicable search results were displayed. Please note that Email has been auto selected in the dropdown box field since the search button was selected while in the Email Activity folder.
In this example only one email sent by test.com. It is possible to modify the date range, time of day, or add additional fields to increase or limit search results. It is also possible to save a search to the folder for future review.
Finding an IP Address Blocked by DIA
DIA rejections happen when an email is sent from a mail server known to be a spammer. Sometimes this includes legitimate companies who have been infected with spambots or are being used for malicious purposes. In these cases emails may be rejected by the SpamFilter Reject from DIA Real-Time Blacklist option. In order to discover if DIA is the cause of a missing email simply follow the first step listed in the previous section, except this time search for DIA. he results will show any emails that were rejected as a result of being on the DIA blacklist. The example below shows a single DIA rejected email. In order to bypass the DIA spam filter check the source IP address needs to be entered into the SpamFilter whitelist.
Monitoring a Single Email Address
At times it may be necessary to monitor a single user to see who they are emailing and what times of the day email is flowing. Please keep in mind that the ThreatMonitor never records the contents of an email. The following report example will only show the date/time and sender/recipient addresses. First, click on the Add Report button to enter the new report wizard.
Next, name the report and enter a description if desired.
Under the Query tab change Include matches to Any. Select Recipient from the drop down box and enter the email address to monitor in the empty box. Finally click the plus sign to the right and setup the same search but this time selecting Sender from the drop down box.
The Display tab will configure how any information matching the search criteria is displayed. For this type of report eSoft recommends a Paging Table and that the Recipient and Sender fields are added as per the onscreen instructions.
Click Apply to save the report. This report will now be added to the Email Activity folder, allowing for constant updates and reports.
Additional Resources
Below are some additional articles that provide more details regarding the topics covered in this guide. Any questions or concerns not answered in these documents should be directed to eSoft technical support, please visit www.esoft.com for contact information.
Allowing the DIA RBL
Email Activity Documentation
