Reputation filtered spam included in internal users report?

[maxst_ironport]

We'd like to use the Internal Users report to provide some per mailbox statistics on just how many messages containing viruses and spam are stopped by our ironport cluster.

Does anyone know whether the figures in the report include reputation filtered spam or just messages identified as spam by IronPort Anti-Spam?

Thanks!

[Tom Foucha]

Since reputation blocking happens before the Internal User is identified it would not be contained in the report.

[maxst_ironport]

Suspected as much, cheers...

[cwling2008]

Hi,

What does it means No User Information in Internal_Users_Top_Users_by_Clean_Outgoing_Messages_RawData report?

Thanks.