Cisco Cisco Email Security Appliance C190 User Guide

Office 365 Mailbox Auto 
Remediation

A file can turn malicious anytime, even after it has reached user’s mailbox. 
AMP can identify this as new information emerges and push retrospective 
alerts to your appliance. With this release you get more than just alerting. 
If your organization is using Office 365 to manage mailboxes, you can 
configure your appliance to perform auto-remedial actions on the 
messages in user mailbox when the threat verdict changes. 

See 

Detecting Forged 
Messages (also known as 
spoofing, CEO fraud, or 
business email 
compromise) 

Cisco Email Security appliance can detect fraudulent messages with 
forged sender address (From: header) and perform actions on such 
messages. 

See 

.

Support for On-Premises 
File Reputation Server

If you have deployed a Cisco AMP Virtual Private Cloud appliance on 
your network, you can now query the file reputation of attachments 
without sending them to the public reputation cloud. 

To configure your appliance to use an on-premises file reputation server, 
see 

 

Cloud Updatable 
Advanced Malware 
Protection Engine

The Advanced Malware Protection engine is now cloud updatable. 

You can use the 

ampstatus

 command in CLI to view the version of 

various Advanced Malware Protection components. For more 
information, see the CLI Reference Guide for AsyncOS for Cisco 
Email Security Appliances.