Report Descriptions

PureMessage offers pre-defined reports that provide graphical representations of key performance statistics. To use these reporting features, the PostgreSQL database must be enabled. The reports provided by PureMessage are:

Attachment Sizes

Shows a histogram (a visual representation of the distribution) of the attachment sizes in a logarithmic distribution.

Attachment Types

Shows a count of attachments received, grouped by attachment type.
Note By default, neither the Attachment Sizes nor the Attachment Types report contains data. If you want PureMessage to display reports data for attachments, edit the PureMessage policy, as described in “Adding Attachment Information” in the Administrator’s Reference.

Message Categorizations

Shows the number of messages detected as spam, virus or other (neither virus nor spam). If PureMessage determines that a message contains spam and also contains a virus, the message counts toward the virus total only. By default, a message is marked as spam if its spam probability score is 50% or greater.

Rejected MTA Connections

Shows the number of connections rejected due to MTA-level IP blocking.

Overall Spam and Virus Count

Shows the total number of spam messages received and the total number of virus-infected messages received.

Messages from Blocked IPs in Policy

Shows the number of messages that matched the “Message is from Blocked IP” policy test. These messages appear in the report as “Blocked” even if a different policy action was used in the rule.

Policy Mark Hits

Shows a count of keys from the message log. If log-marking actions have been added to specific policy rules, this report can be used to count how many times those rules are triggered .

Quarantine Size

Shows the number of new messages added, helping you understand the growth rate of your quarantine. This report also shows the current size (in kilobytes) of local quarantines, and the total number of messages quarantined.

Number of Releases

Shows the number of messages released. This helps you to quickly understand current end user activity and look for any significant trends in the number of messages being released from the quarantine (which may indicate a need for filter tuning).

Rule Hit Rates

Shows the frequency of various spam rule hits. You may want to use this report if you adjust the weighting on a specific spam rule to tune the system for your environment. These rules are contained in the PureMessage updates you receive from Sophos.

Spam Range Volumes

Shows the number of messages by spam probability range, which is shown as a percentage. This report can help you tune your policy configuration to minimize the amount of spam getting quarantined or passed through to end users. It breaks down the scoring of potential spam into bands.

Top Other Relays

Shows the top spam relays by number of other messages (those that are classified as neither spam nor virus). This report can help you fine-tune your spam filtering performance by highlighting other relays (for example, partners) you may want to add to your whitelisted hosts.

Top Relays

Shows the top relays by number of messages.

Top Releasers:

Shows the top releasers of messages.

Top Spam Recipients

Shows the top spam recipients by number of detected spam messages. This report can help you understand which users receive large volumes of spam, allowing you to create custom policy rules to more aggressively filter spam for a group of users or a specific individual.

Top Spam Relays

Shows the top spam relays by number of detected spam messages.

Top Spam Senders

Shows the top spam senders by number of detected spam messages.

Top Virus Relays

Shows the top spam relays by number of detected virus messages.

Top Virus Types

Shows the virus types (categorized by virus ID) found in messages. For details on recent viruses by ID, see the Sophos "Latest virus identities" page.