Cisco Cisco Web Security Appliance S160 Guía Del Usuario
14-15
AsyncOS 9.0 for Cisco Web Security Appliances User Guide
Chapter 14 File Reputation Filtering and File Analysis
Troubleshooting File Reputation and Analysis
Files are Not Uploaded As Expected
Problem
Files are not evaluated or analyzed as expected. There is no alert or obvious error.
Problem
Consider the following:
•
The file may have been sent for analysis by another appliance and thus already be present on the File
Analysis server or in the cache of the appliance that is processing the file.
Analysis server or in the cache of the appliance that is processing the file.
•
Check the maximum file size limit configured for the DVS Engine Object Scanning Limits on the
Security Services > Anti-Malware and Reputation page. This limit applies to Advanced Malware
Protection features.
Security Services > Anti-Malware and Reputation page. This limit applies to Advanced Malware
Protection features.
File Analysis Details in the Cloud Are Incomplete
Problem
Complete file analysis results in the public cloud are not available for files uploaded from other
Web Security appliances in my organization.
Solution
Be sure to group all appliances that will share file analysis result data. See
. This configuration must be done on
each appliance in the group.
Alerts about File Types That Can Be Sent for Analysis
Problem
You receive alerts of severity Info about file types that can be sent for file analysis.
Solution
This alert is sent when supported file types change, or when the appliance checks to see what
file types are supported. This can occur when:
•
You or another administrator changes the file types selected for analysis.
•
Supported file types change temporarily based on availability in the cloud service. In this case,
support for the file types selected on the appliance will be restored as soon as possible. Both
processes are dynamic and do not require any action from you.
support for the file types selected on the appliance will be restored as soon as possible. Both
processes are dynamic and do not require any action from you.
•
The appliance restarts, for example as part of an AsyncOS upgrade.