No Statisics, SecuReporter has no Data, Spam-Filter not working

Michael_I
Michael_I Posts: 42  Freshman Member
First Comment Friend Collector Third Anniversary
edited April 2021 in Security

Hello,

we have a new ATP200. Licence registration status is "registered". All Licences are active (see picture). But there are no statisics (e.g. in Sandboxing are no file names, in Email security no IP-Adresses / see picture).

I also tried a spam filter according to this manual: https://support.zyxel.eu/hc/de/articles/360000701239-Wie-konfiguriere-ich-eine-Anti-Spam-Richtlinie-mit-Mail-Scan-und-DNSBL-

The spam filter isn´t working.

What´s wrong?


All Replies

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @Michael_I,

    In CONFIGURATION > Security Service > Email Security > Email Security, make sure you enable General settings for mail detection and use the latest firmware 4.35(ABFW.2).

    Here is the example for your reference.

    1. Add rules to Black List.


    2. Enable Check Black List and add spam tag.

    3. Set action for spam mail.


    4. Send the mail from the email address in Black List. (ex: Send email from gsbucso@gmail.com to mail address A)  

    5. Connect one PC(mail address A) in ATP's lan and use Outlook to receive emails.

    In MONITOR > Security Statistics > Email Security, you can find the number of spam mails detected by Black List and the sender email address.


  • Michael_I
    Michael_I Posts: 42  Freshman Member
    First Comment Friend Collector Third Anniversary

    Hi Zyxel_emil,

    I made these settings. We use for our Email SSL. The SSL inspection isn´t yet activated. Should we activate it?

    Is it right, that wenn SSL insection is activated the Spam Filter nevertheless is working? I´m a little confused using the zyxel with SSL.

  • Zyxel_Emily
    Zyxel_Emily Posts: 1,396  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @Michael_I,

    The Email Security feature checks SMTP (TCP port 25) and POP3 (TCP port 110) emails by default. 

    The SSL Inspection cannot be used to decrypt the secured mails in the Email Security function. It is mainly implemented to decrypt SSL traffic so the traffic is able to be inspected using App Patrol, Content Filter, Intrusion, IDP and Anti-Malware.

    Here is a similar forum discussion for your reference.

    https://businessforum.zyxel.com/discussion/1337/antispam-doesnt-work

  • We are experincing the same problem on our ATP200 with firmware version V4.60(ABFW.1)

  • Zyxel_Jeff
    Zyxel_Jeff Posts: 1,230  Zyxel Employee
    100 Answers 500 Comments Friend Collector Fourth Anniversary

    Hi @CELCOMPO

     

    You can refer to the following configuration tutorial of anti-spam.

    https://kb.zyxel.com/KB/searchArticle!gwsViewDetail.action?articleOid=015556&lang=EN



    Share your feedback through our survey, make your voice heard, and win a WiFi 7 AP! https://bit.ly/2024_Survey_Community

Security Highlight