The sections within the statistic report displays high-level details about attachment analysis, URL analysis, statistics report summary, and appliance-specific statistics (such as email URLs and email attachments).
Note
The report displays a value of zero for a category when the statistic is not available.
Attachment analysis
The following table describes the information that is displayed in the Attachment Analysis section:
Category | Description |
|---|---|
Date | Date that the email was seen. |
Tot_Email | Total number of emails that have been received. |
Bypass_Email | Total number of bypassed messages. Emails are typically bypassed due to excessive email traffic. |
Scan_Email | Total number of scanned emails that have been submitted for analysis. |
With_att | Total number of scanned emails with at least one attachment. |
Tot_att | Total number of attachments detected in all scanned emails that have been received. |
Tot_dup | Total number of emails with duplicate attachments that have been previously scanned. |
Mal_att | Total number of malware samples that were detected as malicious. |
Mal_dup | Total number of duplicate malware samples that were detected as malicious. |
URL analysis
The following table describes the information that is displayed in the URL Analysis section:
Category | Description |
|---|---|
Date | Date that the email was seen. |
Tot_Email | Total number of emails that have been received. |
With_URL | Total number of emails with at least one URL. |
>10_URL | Total number of emails that contain more than 10 URLs. |
>100_URL | Total number of emails that contain more than 100 URLs. |
>200_URL | Total number of emails that contain more than 200 URLs. |
Tot_URL | Total number of URLs detected in all scanned emails that have been received. |
Mal_URL | Total number of malicious URLs scanned across all emails. |
Uniq_URL | Total number of unique URLs detected in all scanned emails that were submitted for analysis. |
Statistics report summary
The following table describes the information about the total number of scanned emails, URLs, and attachments that are detected in email traffic in the statistics report summary section:
Category | Description |
|---|---|
Average Attachments | The average number of attachments per email received, equal to the total number of attachments divided by the total number of emails. |
Average URLs | The average number of URLs per email received, equal to the total number of URLs divided by the total number of emails. |
Total Attachment Percentage | The percentage of emails that contain attachments, equal to the total number of emails with attachments divided by the total number of emails and multiplied by 100. |
Total URL Percentage | The percentage of emails that contain URLs, equal to the total number of emails with URLs divided by the total number of emails and multiplied by 100. |
Maximum run time | The maximum run time across all samples that were submitted and analyzed. In the case of a compressed file, only the run time of the child submission that is associated with the parent submission is calculated. |
Maximum wait time | The maximum wait time across all samples that were submitted and analyzed. In the case of a compressed file, only the run time of the child submission that is associated with the parent submission is calculated. |
The total number of attachments detected in all scanned emails and duplicate attachments for each file type are also displayed.
Showing attachment analysis
Note
For managed Email Security - Server appliances, the cumulative statistics in the Showing Attachment Analysis section are not displayed on the Central Management System appliance.
The following table describes the cumulative statistics about all email attachments that are displayed in the Showing Attachment Analysis section:
Field | Description |
|---|---|
Total Attachments Submitted | Total number of attachments submitted for analysis. |
Objects analyzed | Total number of attachments that have been analyzed. This number can be greater than the total number of attachments submitted if some of the objects are extracted from a ZIP file type or if attachments contain embedded objects. |
Objects identified as Malicious | Total number of attachments that were detected as malicious. |
Total Events | Total number of events that were detected. |
Objects break down by system status | Total number of attachments with each system status type. |
Alternatively, use the show email-analysis attachment command to view the statistics for email attachments.
Showing URL analysis
Note
For managed Email Security - Server appliances, the cumulative statistics in the Showing URL Analysis section are not displayed on the Central Management System appliance.
The following table describes the cumulative statistics about all email URLs that are displayed in the Showing URL Analysis section:
Field | Description |
|---|---|
Total URLs Submitted | Total number of URLs submitted for analysis. |
Objects analyzed | Total number of URLs that have been analyzed. |
Objects identified as Malicious | Total number of URLs that were detected as malicious. |
Total events | Total number of events that were detected. |
Objects break down by system status | Total number of URLs with each system status type. |
Alternatively, use the show email-analysis url command to view the statistics for email URLs.