安全与合规中心中的 SMTP 身份验证客户端见解&报告SMTP Auth clients insight and report in the Security & Compliance Center

重要

改进的 Microsoft 365 安全中心现已提供公共预览版。The improved Microsoft 365 security center is now available in public preview. 此新体验将 Defender for Endpoint、Defender for Office、365 Microsoft 365 Defender 等引入了 Microsoft 365 安全中心。This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 security center. 了解新增功能Learn what's new. 本主题可能同时适用于 Microsoft Defender for Office 365 和 Microsoft 365 Defender。This topic might apply to both Microsoft Defender for Office 365 and Microsoft 365 Defender. 请参阅 适用对象 部分,并查找本文中可能存在差异的特定标注。Refer to the Applies To section and look for specific call-outs in this article where there might be differences.

适用对象Applies to

安全 & 合规中心中的"邮件流"仪表板中的 SMTP 身份验证客户端见解和关联的 SMTP 身份验证客户端报告突出显示了组织中用户或系统帐户对 SMTP AUTH 客户端提交协议的使用。The SMTP Auth clients insight in the Mail flow dashboard and the associated SMTP Auth clients report in the Security & Compliance Center highlight the use of the SMTP AUTH client submission protocol by users or system accounts in your organization. 此旧协议 (终结点 smtp.office365.com) 仅提供基本身份验证,并且易于被破坏的帐户用来发送电子邮件。This legacy protocol (which uses the endpoint smtp.office365.com) only offers Basic authentication, and is susceptible to being used by compromised accounts to send email. 通过见解和报表,可以检查 SMTP AUTH 电子邮件提交的异常活动。The insight and report allow you to check for unusual activity for SMTP AUTH email submissions. 它还显示使用 SMTP AUTH 的客户端或设备的 TLS 使用情况数据。It also shows the TLS usage data for clients or devices using SMTP AUTH.

小部件指示过去 7 天内使用 SMTP 身份验证协议的用户和服务帐户的数量。The widget indicates the number of users or service accounts that have used the SMTP Auth protocol in the last 7 days.

安全与合规中心的"邮件流"仪表板中的"SMTP &小组件"

如果单击小部件上的消息数,则会出现 SMTP 身份验证客户端 飞出控件。If you click the number of messages on the widget, an SMTP Auth clients flyout appears. 该飞出站提供上一周 TLS 使用情况和卷的聚合视图。The flyout provides an aggregated view of the TLS usage and volumes for the last week.

单击"邮件流"仪表板中的"SMTP 身份验证客户端"小组件后的详细信息 flyout

您可以单击 "SMTP 身份验证客户端报告 "链接以转到 SMTP 身份验证客户端报告,如下一节中所述。You can click the SMTP Auth clients report link to go to the SMTP Auth clients report as described in the next section.

SMTP 身份验证客户端报告SMTP Auth clients report

SMTP 身份验证客户端报告的报告视图Report view for the SMTP Auth clients report

默认情况下,报告显示过去 7 天的数据,但最近 90 天的数据可用。By default, the report shows data for the last 7 days, but data is available for the last 90 days.

概述部分包含以下图表:The overview section contains the following charts:

  • 查看数据 者: 发送卷:默认情况下,图表显示从所有域发送的 SMTP 身份验证客户端邮件数 (显示其数据 默认情况下,所有发件人域都) 。View data by: Sending volume: By default, the chart shows the number of SMTP Auth client messages that were sent from all domains (Show data for: All sender domains is selected by default). 可以通过单击"显示其数据",然后从下拉列表中选择发件人域,将结果筛选到特定发件人域。You can filter the results to a specific sender domain by clicking Show data for and selecting the sender domain from the dropdown list. 如果您将特定的数据点悬停在 (天) ,将显示消息数。If you hover a specific data point (day), the number of messages is shown.

    安全与合规中心内 SMTP 身份验证客户端报告中&卷视图

  • 查看数据者:TLS 使用情况:图表显示选定时段内所有 SMTP 身份验证客户端邮件的 TLS 使用率百分比。View data by: TLS Usage: The chart shows the percentage of TLS usage for all SMTP Auth client messages during the selected time period. 此图允许你识别仍在使用较早版本的 TLS 的用户和系统帐户并采取措施。This chart allows you to identify and take action on users and system accounts that are still using older versions of TLS.

    安全与合规中心内 SMTP 身份验证客户端报告中的 TLS &视图

如果 单击筛选器中的 报表视图,可以指定开始日期和 结束日期的日期范围If you click Filters in a report view, you can specify a date range with Start date and End date.

单击 "请求 报告"以在电子邮件中接收报告的详细版本。Click Request report to receive a more detailed version of the report in an email message. 可以指定接收报告的日期范围和收件人。You can specify the date range and the recipients to receive the report.

SMTP 身份验证客户端报告的详细信息表视图Details table view for the SMTP Auth clients report

如果单击 "查看详细信息表",显示的信息取决于您所查看的图表:If you click View details table, the information that's shown depends on the chart you were looking at:

  • 查看数据者:发送卷:下表显示了以下信息:View data by: Sending volume: The following information is shown in a table:

    • 发件人地址Sender address
    • 邮件计数Message count

    如果您选择一行,则相同的详细信息将显示在一个飞出区中。If you select a row, the same details are shown in a flyout.

  • 查看数据者:TLS 使用情况:下表显示了以下信息:View data by: TLS Usage: The following information is shown in a table:

    • 发件人地址Sender address
    • TLS1.0%*TLS1.0%*
    • TLS1.1%*TLS1.1%*
    • TLS1.2%*TLS1.2%*
    • 邮件计数Message count

    * 此列显示发件人发送的邮件的百分比和数量。* This column shows both the percentage and number of messages from the sender.

如果在详细信息 视图中单击"筛选器",可以指定开始日期和 结束日期的日期范围If you click Filters in a details table view, you can specify a date range with Start date and End date.

如果您选择一行,则类似的详细信息将显示在一个飞出内容中:If you select a row, similar details are shown in a flyout:

SMTP 身份验证客户端报告中 TLS 使用情况视图的详细信息表的"详细信息"飞出

单击 "请求 报告"以在电子邮件中接收报告的详细版本。Click Request report to receive a more detailed version of the report in an email message. 可以指定接收报告的日期范围和收件人。You can specify the date range and the recipients to receive the report.

若要返回到报告视图,请单击"查看 报告"。To go back to the reports view, click View report.

有关邮件流仪表板中其他见解的信息,请参阅安全与合规中心内& 见解For information about other insights in the Mail flow dashboard, see Mail flow insights in the Security & Compliance Center.