Cisco Systems

Cisco IronPort (now Cisco Email Security Appliance/Cloud Email Security) is an email security gateway that provides comprehensive protection against spam, phishing, malware, and data loss via email. It uses multiple detection engines including reputation filtering, anti-spam, anti-virus, advanced malware protection (AMP), and outbreak filters. 

The platform generates detailed mail logs capturing message flow from sender to delivery, including connection details, message disposition, content filtering actions, DLP policy matches, and encryption events. These logs enable security teams to trace email-borne threats, investigate phishing campaigns, and monitor compliance with email security policies.