Cisco Cisco Firepower Management Center 4000

Click the edit icon (

) next to the file list where you want to add values from a source file.

The File List pop-up window appears.

Select 

List of SHAs

 from the 

 field.

The pop-up window updates to include new fields.

Optionally, enter a description of the source file in the 

 field. 

If you do not enter a description, the system uses the file name.

Click 

 to browse to the source file, then click 

 to add the list.

The source file is added to the file list. The SHA-256 column lists how many SHA-256 values the file 
contains.

Click 

. 

Reapply all access control policies with file policies that use the file list.

After the policies apply, the system no longer performs malware cloud lookups on files in the file list.

Malware

Series 3, Virtual, X-Series, ASA FirePOWER

Any except DC500

If you have a copy of the file you want to add to a file list, you can upload the file to the Defense Center 
for analysis; the system calculates the file’s SHA-256 value and adds the file to the list. The system does 
not enforce a limit on the size of files for SHA-256 calculation. 

Admin/Network Admin

On the object manager’s File List page, click the edit icon (

) next to the clean list or custom detection 

list where you want to add a file.

The File List pop-up window appears.

Select 

 

from the 

 field.

The pop-up window updates to include new fields.

Optionally, enter a description of the file in the 

 field. 

If you do not enter a description, the file name is used for the description on upload.

Click 

 to browse to the source file, then click 

to add the list.

The file is added to the file list.

Click 

. 

Reapply all access control policies with file policies that use the file list.

After the policies apply, the system no longer performs malware cloud lookups on files in the file list.