Cisco Email and Web Security

Applies to: Cisco Secure Email and Web Manager v13.0 and later, Cisco Secure Email v13.0 and later, Cisco Secure Web Appliance v13.0 and later for Cloud and On-Premises)

Overview

Cisco Email and Web Security (formerly known as Cisco Security Appliance) centralizes management and reporting functions across multiple Cisco email and web security appliances. Its email security gateway (Cisco secure email gateway) product is designed to detect and block many email-borne threats, such as malware, spam, and phishing attempts. Cisco Secure Web Appliance protects your organization by automatically blocking risky sites and testing unknown sites before allowing users to click on them.

EventTracker, when integrated with Cisco Email and Web Security, collects logs from Cisco Secure Email Gateway and Cisco Secure Web Appliance creates detailed reports, alerts, dashboards, and saved searches. These attributes of EventTracker help the users to view the critical information on a single platform.

The Secure Email reports contain a detailed overview of the activities like incoming message summary (Data Loss and Protection), DLP and AMP (Advanced Malware Protection), event summary, malicious or suspicious URLs summary, and many more. The Secure Web Appliance reports contain Proxy, Layer 4, SOCKS Proxy monitored allowed and blocked traffic events summary.

EventTracker Knowledge Pack for Cisco Email and Web Security allows you to monitor the following components: 

• Security – Malicious/ suspicious DLP and AMP detection, rejected connections, messages blocked due to content filters, blocked proxy traffic.
• Operation – Web traffic events.

1.  
2.  
3.  
4.  
5.  
6.  
7.  
8.  
9.  
10.  
11.  
12.  
13.  
14.  
15.  

Previous Next

After the Cisco Email and Web Security is configured to deliver the events to the EventTracker Manager, the dashboards, and reports can be configured into EventTracker.

Scope

The configuration details are consistent with EventTracker version 9.3 and later, and Cisco Email and Web Security (Cisco Secure Email, Cisco Secure Web Appliance, Cisco Secure Email and Web Manager)

Documentation

To configure Cisco Email and Web Security to send logs to EventTracker, refer to the How-to Guide.

For more information please refer to the Integration Guide.

Download Cisco Email and Web Security Integrator 2.1.0.0.