Incoming virus count differs

[Dennis Goh]

Hi All,

I've just recently deployed an Ironport C370 and I realize, after 2 weeks of running, there are some discrepancies in the counts under overview and virus types.

Under overview, we can see that the count is 39 messages caught by the anti-virus, however under the top virus types, we can see 131 messages. Why does it not match?

Thanks in advance,

Dennis Goh

[Andreas Mueller · Accepted solution]

Hi Dennis,

check out this KB article for the answer:

Article #975: Why has the Virus Types page a higher count on detected viruses  than the Overview Page virus count? Link: http://tools.cisco.com/squish/6E3c4

It's all about counting messages only once when they have  flagged by antispam as well.

Hope that helps,

Andreas

[Dennis Goh]

Thanks Andreas! This explains a lot!