Cisco Cisco Web Security Appliance S690 User Guide

Files are not evaluated or analyzed as expected. There is no alert or obvious error. 

Consider the following: 

The file may have been sent for analysis by another appliance and thus already be present on the File 
Analysis server or in the cache of the appliance that is processing the file. 

Check the maximum file size limit configured for the DVS Engine Object Scanning Limits on the 
Security Services > Anti-Malware and Reputation page. This limit applies to Advanced Malware 
Protection features. 

Complete file analysis results in the public cloud are not available for files uploaded from other 

Web Security appliances in my organization. 

Be sure to group all appliances that will share file analysis result data. See 

. This configuration must be done on 

each appliance in the group. 

You receive alerts of severity Info about file types that can be sent for file analysis. 

This alert is sent when supported file types change, or when the appliance checks to see what 

file types are supported. This can occur when: 

You or another administrator changes the file types selected for analysis.

Supported file types change temporarily based on availability in the cloud service. In this case, 
support for the file types selected on the appliance will be restored as soon as possible. Both 
processes are dynamic and do not require any action from you. 

The appliance restarts, for example as part of an AsyncOS upgrade.