Cisco Cisco FirePOWER Appliance 7115

Version 5.3

Sourcefire 3D System User Guide

226

Using Objects and Security Zones

Working with File Lists

Chapter 4

Downloading a Source File from a File List

: Malware

: Series 3, virtual, X-Series

: Any except DC500

You can view, download, or delete existing source file entries on a file list. Note 

that you cannot edit a source file once uploaded. You must first delete the source 

file from the file list, then upload an updated file. For more information on 

uploading a source file, see 

page 219.
The number of entries associated with a source file refers to the number of 

distinct SHA-256 values. If you delete a source file from a file list, the total 

number of SHA-256 entries the file list contains decreases by the number of valid 

entries in the source file.

To download a source file:

: Admin/Network Admin

1. On the object manager’s File List page, click the edit icon (

) next to the 

clean list or custom detection list where you want to download a source file.
The File List pop-up window appears.

2. Next to the source file you want to download, click the view icon (

).

The View SHA-256’s in list pop-up window appears.

3. Click Download SHA List and follow the prompts to save the source file.