SMTP 驗證用戶端在安全性 & 規範中心內的洞察力和報告SMTP Auth clients insight and report in the Security & Compliance Center

重要

改良的 Microsoft 365 安全性中心現在可供公開預覽。The improved Microsoft 365 security center is now available in public preview. 這個新的體驗將適用於端點的 Defender、適用於 Office 365 的 Defender、Microsoft 365 Defender 和更多功能帶到 Microsoft 365 安全性中心裡面。This new experience brings Defender for Endpoint, Defender for Office, 365 Microsoft 365 Defender, and more into the Microsoft 365 security center. 了解新功能Learn what's new. 本主題僅適合適用於 Office 365 的 Microsoft Defender 和 Microsoft 365 Defender。This topic might apply to both Microsoft Defender for Office 365 and Microsoft 365 Defender. 請參閱 [適用於] 區段,並且尋找此文章中可能有所不同的特定圖說文字。Refer to the Applies To section and look for specific call outs in this article where there might be differences.

適用於Applies to

Smtp 驗證用戶端郵件流程儀表板中深入瞭解,安全性 & 規範中心內的相關聯 SMTP 驗證用戶端報告,請強調使用者或組織中的系統帳戶使用 SMTP 驗證用戶端提交通訊協定。The SMTP Auth clients insight in the Mail flow dashboard and the associated SMTP Auth clients report in the Security & Compliance Center highlight the use of the SMTP AUTH client submission protocol by users or system accounts in your organization. 這種舊版通訊協定 (會使用端點 smtp.office365.com) 僅提供基本驗證,而且很容易遭到受損帳戶使用以傳送電子郵件。This legacy protocol (which uses the endpoint smtp.office365.com) only offers Basic authentication, and is susceptible to being used by compromised accounts to send email. 「洞察力」和「報告」可讓您檢查是否有不尋常的 SMTP 驗證電子郵件提交活動。The insight and report allow you to check for unusual activity for SMTP AUTH email submissions. 此外,它也會顯示使用 SMTP 驗證之用戶端或裝置的 TLS 使用狀況資料。It also shows the TLS usage data for clients or devices using SMTP AUTH.

此小工具會指出過去7天內,已使用 SMTP 驗證通訊協定的使用者或服務帳戶數目。The widget indicates the number of users or service accounts that have used the SMTP Auth protocol in the last 7 days.

安全性 & 規範中心內郵件流程儀表板中的 SMTP 驗證用戶端小工具

如果您按一下小工具上的郵件數目,則會出現 SMTP 驗證用戶端 快顯視窗。If you click the number of messages on the widget, an SMTP Auth clients flyout appears. 浮出控制項可提供過去一周之 TLS 使用狀況和磁片區的匯總視圖。The flyout provides an aggregated view of the TLS usage and volumes for the last week.

在郵件流程儀表板中按一下 [SMTP 驗證用戶端] 小工具後的詳細資料浮出控制項

您可以按一下 [ Smtp 驗證用戶端] 報告 連結,以移至下一節所述的 smtp 驗證用戶端報告。You can click the SMTP Auth clients report link to go to the SMTP Auth clients report as described in the next section.

SMTP 驗證用戶端報告SMTP Auth clients report

SMTP 驗證用戶端報告的報表檢視Report view for the SMTP Auth clients report

根據預設,報告會顯示過去7天的資料,但資料可用於過去的90天。By default, the report shows data for the last 7 days, but data is available for the last 90 days.

[一覽表] 區段包含下列圖表:The overview section contains the following charts:

  • 透過 下列方式來查看資料:傳送磁片區:依預設,圖表會顯示從所有網域傳送來的 SMTP 驗證用戶端郵件數目 (顯示資料:預設會選取 [所有寄件者網域]) 。View data by: Sending volume: By default, the chart shows the number of SMTP Auth client messages that were sent from all domains (Show data for: All sender domains is selected by default). 您可以按一下 [ 顯示資料 ],然後從下拉式清單中選取 [寄件者網域],將結果篩選為特定寄件者網域。You can filter the results to a specific sender domain by clicking Show data for and selecting the sender domain from the dropdown list. 如果您將特定資料點懸停 (day) 中,就會顯示訊息的數目。If you hover a specific data point (day), the number of messages is shown.

    在安全性 & 規範中心的 SMTP 驗證用戶端報告中傳送大量視圖

  • 資料查看依據: TLS 使用方式:此圖表顯示選取時段內所有 SMTP 驗證用戶端郵件的 TLS 使用百分比。View data by: TLS Usage: The chart shows the percentage of TLS usage for all SMTP Auth client messages during the selected time period. 這張圖表可讓您識別仍然使用舊版 TLS 的使用者和系統帳戶,並對其採取動作。This chart allows you to identify and take action on users and system accounts that are still using older versions of TLS.

    安全性 & 規範中心內的 SMTP 驗證用戶端報告中的 TLS 使用狀況視圖

如果您按一下報表檢視中的 [ 篩選器 ],您可以指定具有 開始日期結束日期 的日期範圍。If you click Filters in a report view, you can specify a date range with Start date and End date.

按一下 [ 要求報告 ],以在電子郵件訊息中接收更詳細的報表版本。Click Request report to receive a more detailed version of the report in an email message. 您可以指定日期範圍和接收報告的收件者。You can specify the date range and the recipients to receive the report.

SMTP 驗證用戶端報告的詳細資料表格視圖Details table view for the SMTP Auth clients report

如果您按一下 [ 查看詳細資料] 表格,顯示的資訊將取決於您所查看的圖表:If you click View details table, the information that's shown depends on the chart you were looking at:

  • 透過 下列方式查看資料:傳送磁片區:下列資訊會顯示在表格中:View data by: Sending volume: The following information is shown in a table:

    • 寄件者位址Sender address
    • 訊息計數Message count

    如果您選取某列,則會在飛入的視窗中顯示相同的詳細資料。If you select a row, the same details are shown in a flyout.

  • 資料查看依據: TLS 使用方式:下列資訊會顯示在表格中:View data by: TLS Usage: The following information is shown in a table:

    • 寄件者位址Sender address
    • TLS 1.0%*TLS1.0%*
    • TLS 1.1%*TLS1.1%*
    • TLS 1.2%*TLS1.2%*
    • 訊息計數Message count

    * 此欄位會顯示寄件者的百分比和郵件數目。* This column shows both the percentage and number of messages from the sender.

如果您按一下 [詳細資料] 表格視圖中的 [ 篩選 ],您可以指定具有 開始日期結束日期 的日期範圍。If you click Filters in a details table view, you can specify a date range with Start date and End date.

如果您選取某列,則會在浮出控制項中顯示類似的詳細資料:If you select a row, similar details are shown in a flyout:

來自 SMTP Auth 用戶端報告中 TLS 使用狀況視圖詳細資料表格的詳細資料快顯視窗

按一下 [ 要求報告 ],以在電子郵件訊息中接收更詳細的報表版本。Click Request report to receive a more detailed version of the report in an email message. 您可以指定日期範圍和接收報告的收件者。You can specify the date range and the recipients to receive the report.

若要回到 [報告] 視圖,請按一下 [ 查看報告]。To go back to the reports view, click View report.

如需郵件流程儀表板中其他真知灼見的詳細資訊,請參閱 Security & 合規性中心中的郵件流程洞察力For information about other insights in the Mail flow dashboard, see Mail flow insights in the Security & Compliance Center.