Mimecast Account Assessment Report - At A Glance

This article provides an overview of the Mimecast Account Assessment Report created for your account by Mimecast at the end of each reporting period. The report is available for one week from Monday to Sunday and over each calendar month.

Email Overview

Total Inbound Messages

The number of messages accepted by Mimecast MTA for onward processing on behalf of an internal recipient. When Mimecast processes inbound mail, checks and scans are performed to ensure only legitimate messages pass through. Emails that pass all these checks will be accepted and moved to the Delivery Queue for final delivery to the recipient's mail server.

If a message is addressed to multiple recipients, each accepted recipient counts +1 to this report.

Inbound Malware Detected

The number of inbound messages with malware detected by Mimecast scanners. The different types of malware detected are already known by Mimecast and are rejected at the gateway. Any 'unknown' malware is sent to the sandbox for further analysis. Administrators can view malware rejection information in the Mimecast Administration Console under Message Center: Rejected and Deferred Messages. The number of inbound messages with malware detected.

Inbound Rejection

This value displays as a percentage of total Inbound mail, with a breakdown by reason provided further in the report. The reasons include connection attempts, blocklists, reputation-based rejections, virus signatures, and messages destined to a non-existent recipient, with each instance counted once per recipient. Administrators can view malware rejection information in the Mimecast Administration Console under Message Center: Rejected and Deferred Messages.

Total Outbound Messages

The number of messages sent from internal users through Mimecast MTA for onward processing to the external recipient. When Mimecast processes outbound mail, checks and scans are implemented to safeguard email transmissions. Messages that pass all these checks are moved to the Delivery Queue for final delivery to the external recipient's mail server.

If a message is addressed to multiple recipients, each accepted recipient counts +1 to this report.

Outbound Malware Detected

Displays the number of outbound messages in which we've detected malware. Each instance is counted once per recipient. Outbound malware could mean you've suffered an internal security breach (e.g., an account takeover or malware installed) that you must look into.

To prevent outbound malware being sent and damaging your company's reputation, use our Internal Email Protect - Configuration functionality. It includes sophisticated malware detection designed to prevent malware from being sent. If you don't have this functionality enabled on your account, you may be unaware of a data breach. Contact your Mimecast Account Manager for further details.

Investigation into outbound malware reporting has shown that these instances are often a result of archive/journal processing.

Outbound Rejection

The value displays as a % of total Outbound email, with a breakdown by reason provided further in the report. The reasons include connection attempts, temporary failures, or messages destined to a non-existent recipient, with each instance counted once per recipient. Administrators can view malware rejection information in the Administration Console under Message Center: Rejected and Deferred Messages.

User Activity

User Device Pairs

The number of users accessing one of Mimecast's mobile, desktop, or continuity services. A user can use multiple clients (e.g., Mimecast for Outlook and Mimecast for Mobile iOS/Android), with each unique combination of user and client counting as +1 for each reporting day.

Searches

Displays the number of searches for all users across all device types.

Targeted Threat Protection

URL Protect

The number of URLs clicked from Inbound mail during the reporting period, including a display of the ratio of safe vs. unsafe URLs clicked. The behaviors are dependent on the settings configured in the URL Protection definition in your Mimecast account. View the Configuring URL Protection Definitions and Configuring URL Protection Policies pages for further details.

Impersonation Protect

The number of potential impersonation attacks detected. These are triggered by at least one Impersonation Protect policy configured in your account. View the Configuring Impersonation Protection Definitions and Configuring Impersonation Protection Policies pages for more information.

Attachment Protect

The number of file attachments sent to the sandbox during the email delivery process, displaying a split of the amount found to be unsafe. Policies for the different attachment scenarios require a configured definition that sets the conditions under which an attachment is considered safe or unsafe. View the Configuring Attachment Protection Definitions and Configuring Attachment Protection Policies pages for further detail.

See also...

• • • Mimecast Account Assessment Report - Access.
    • Mimecast Account Assessment Report - Overview.
    • Mimecast Account Assessment Report - Secure Email
    • Mimecast Account Assessment Report - Large File Send
    • Secure Messaging - The Secure Messaging Portal
    • Mimecast Account Assessment Report - URL Protection
    • Mimecast Account Assessment Report - Attachment Protect
    • Mimecast Account Assessment Report - Impersonation Protect
    • Mimecast Account Assessment Report - User Activity
    • Mimecast Account Assessment Report - Web Security