Understanding the Types of Reports Available in FOPE
Applies to: Office 365 for enterprises, Live@edu, Forefront Online Protection for Exchange
Topic Last Modified: 2013-03-15
There are four types of reports available in Forefront Online Protection for Exchange (FOPE):
Email Traffic Report
Top Viruses Report
Top Users Report
You can modify a report from the My Reports tab after the report has been run. From here you can make quick changes to your report settings based on the information you receive from the report. Learn more about creating and changing reports in Create, Modify, or Delete a Report.
The following sections explain each report type in more detail.
The Email Traffic report returns the number and volume of messages for each traffic type that you select. The report is separated into two sections: Email Traffic Count and Email Traffic Volume. Each section displays a summary of the returned results, which are categorized into percentages, a pie graph, and a line graph. Some of the values in the report show information in greater detail as well. To view the hourly summary from the daily summary, expand each entry to see more details. Details for a specific traffic type are available from the Email Traffic Count section only.
The available traffic types are:
- Inbound delivery: Legitimate messages that are delivered to this organization or domain. Reports that include this traffic type do not include messages that are allowed by policy filter rules.
- Connectors: Messages that meet the criteria of a FOPE connector. Additionally, messages that meet the criteria of a connector, but are rejected (a message can be rejected, for example, in a case where TLS is required, but the message does not have TLS applied).
- Spam: Inbound messages that are filtered as spam. This traffic type also includes the requests that are sent to the e-mail abuse and false-positive submission e-mail aliases, and, if applicable, any messages that are marked as not junk that are requested from the Spam Quarantine or Spam Notification e-mail messages.
- Inbound virus: Inbound mail and virus-infected file attachments that are scanned, as well as viruses that are blocked and cleaned.
- Inbound policy filter: Inbound messages that are filtered by the policy filter. (The report breaks down these messages into each different filter type.)
- Outbound delivery: All messages that are sent from this organization or domain. This traffic type includes successfully sent outbound messages and outbound messages that are blocked due to a policy filter.
- Outbound suspicious: All outbound messages that exceed the spam threshold of the service and are being routed out through the Higher Risk Delivery Pool of IP addresses.
- Outbound virus: Outbound mail and virus-infected file attachments that are scanned, as well as viruses that are blocked and cleaned.
- Outbound policy filtering: Outbound messages that are filtered by policy filter. (The report breaks down these messages into each different filter type.)
The Top Viruses Report returns a list of the top 10 viruses that have been caught by the virus filters for your domain or set of domains. This report will not show virus data for Exchange Online customers, since antivirus scanning is performed by Forefront Protection 2010 for Exchange Server on the Exchange Online servers.
The Deferral Report returns a list of messages that have been deferred by the service. It includes the message and the reason for deferral. The Deferral Report includes inbound messages only. It does not include messages sent outbound from your domain to the Internet.
The Top Users Report returns a list of the top recipients, top senders, top spam recipients, and top virus recipients.
|This report displays only users that belong to domains that have Directory-Based Edge Blocking enabled. Doing this helps decrease the number of invalid user accounts from being recorded in this report.|