Cisco Cisco Web Security Appliance S670

All new features in this release are related to the file reputation and file analysis features. 

Verdict Updates 
Report Change 

Clicking a SHA-256 link in the Verdict Updates report now displays in Web 
Tracking all available transactions that included that SHA-256. 

Reputation Score 
Threshold Customization

You can override the reputation threshold for Advanced Malware 
Protection provided by the cloud with a custom value.

SSL Certificate Retrieval AsyncOS gets the latest SSL certificates automatically.

Support for Port 443

Port 443 is now supported for Advanced Malware Protection file 
reputation queries. 

Proxy Support

The appliance can now communicate with the cloud reputation service via 
an upstream proxy. Configure this in the Advanced Malware Protection 
settings, Advanced section. 

Note that a proxy is not currently supported for the connection with the File 
Analysis server. 

Improved Logging for 
Advanced Malware 
Protection

AsyncOS logs  file analysis failures in the AMP log. 

File Reputation 
Filtering and File 
Analysis 

Advanced Malware Protection (AMP) is an additionally licensed feature available 
to all Cisco Web Security appliance customers. AMP is a comprehensive 
malware-defeating solution that enables malware detection and blocking, 
continuous analysis, and retrospective alerting. It takes advantage of the vast Cisco 
cloud security intelligence networks.

AMP augments the anti-malware detection and blocking capabilities already 
offered by Cisco Web Security appliances with enhanced file reputation 
capabilities, detailed file behavior reporting, continuous file analysis, and 
retrospective verdict alerting. 

For requirements and other details, see the File Reputation Filtering and File 
Analysis chapter in the online help or user guide.