Cisco Cisco Email Security Appliance C170 Betriebsanweisung
1-3
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 1 Getting Started with the Cisco Email Security Appliance
What’s New in This Release
Message Filter Rule to
Detect Malformed MIME
Headers
Detect Malformed MIME
Headers
You can now take actions on messages with malformed MIME headers
using the new message filter rule: “
using the new message filter rule: “
malformed-header
.”
See
Enhanced Verdict Update
Alert
Alert
Alert for file reputation verdict changes is now enhanced to include
additional details such as details of the message, spyname, and so on.
additional details such as details of the message, spyname, and so on.
Enhanced AMP Reports
Advanced Malware Protection page includes the following
enhancements:
enhancements:
•
A new graph that shows the incoming files handled by AMP in
percentage based on the verdicts (Clean, Malicious, Unknown,
Unscannable).
percentage based on the verdicts (Clean, Malicious, Unknown,
Unscannable).
•
A new graph that shows the top incoming malware files based on the
file types.
file types.
•
A new table that shows the number of incoming files handled by AMP
based on the verdicts (Clean, Malicious, Unknown, Unscannable).
Click on the file count to view the related messages in Message
Tracking.
based on the verdicts (Clean, Malicious, Unknown, Unscannable).
Click on the file count to view the related messages in Message
Tracking.
•
Incoming Malware Threat Files Report
–
Incoming Malware Threat Files report now shows the name of the
file(s) associated with a SHA-256 hash.
file(s) associated with a SHA-256 hash.
–
If you click on a SHA-256 hash, a new page that shows file
reputation and analysis summary for the specified SHA-256 hash
is displayed.
reputation and analysis summary for the specified SHA-256 hash
is displayed.
–
Click on the number of infected messages to view the related
messages in Message Tracking.
messages in Message Tracking.
File Analysis page includes the following enhancements:
•
Completed Analysis Requests from This Appliance and Pending
Analysis Requests from This Appliance reports include the following
enhancements:
Analysis Requests from This Appliance reports include the following
enhancements:
–
Reports now show the name of the file(s) associated with a
SHA-256 hash.
SHA-256 hash.
–
Click on Details to view the related messages in Message
Tracking.
Tracking.
•
A new report that shows the number of files uploaded for file analysis.
AMP Verdict Updates page includes the following enhancements:
•
Files with Retrospective Verdict Changes report now shows the name
of the file(s) associated with a SHA-256 hash.
of the file(s) associated with a SHA-256 hash.
•
Files with Retrospective Verdict Changes report now shows the old
disposition for a given SHA-256 hash.
disposition for a given SHA-256 hash.
•
If you click on a SHA-256 hash, a new page that shows file analysis
summary for the specified SHA-256 hash is displayed.
summary for the specified SHA-256 hash is displayed.
•
Click on Details to view the related messages in Message Tracking.