cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Cisco Secure Email Support Community

Product Support Talos Support Cisco Support Reference + Current Release
Gateway Reputation Lookup Open a support case Secure Email Guided Setup
Gateway: 14.0.1-033
Cloud Gateway Email Status Portal Support & Downloads docs.ces.cisco.com
Email and Web Manager: 14.1.0-227
Email and Web Manager Web & Email Reputation Worldwide Contacts Product Naming Quick Reference
Reporting Plug-in: 1.1.0.136
Encryption Bug Search
Encryption Plug-in: 1.2.1.167
Cloud Mailbox Notification Service
Outlook Add-in(s): More info

629
Views
5
Helpful
2
Replies
Tomki
Beginner

is there a trick to using Message Tracking for empty senders?

"Internal users" available under the 'Monitor' menu shows lists of user addresses that you can click on, leading over to useful Message Tracking details. 

However one of the most common entries is one like "No User Information"

e.g. try https://YOUR.IRONPORT/monitor/reports/internal_user_search and if I sort by 'Outgoing spam detected' for example, I get a number in the corresponding column, which I can click on to try to find out what internal messages are being sent which get identified as spam. Useful info to try and investigate.

 

However the link populates "No user information" straight across into the Message tracking, which fails to find anything at all.  I've tried various things without luck; is there a trick to getting consolidated message tracking for an empty sender value?

 

Screen Shot 2021-10-23 at 11.55.04.png

 

2 REPLIES 2
marc.luescherFRE
Enthusiast

Hi Tomki,

 

can you try using ^(?![\\s\\S]) in the from field and let me know if you get any hits ?

 

-Marc

No hits.

Create
Recognize Your Peers
Content for Community-Ad