Cisco Cisco Content Security Management Appliance M160 Guía Del Usuario
1-3
AsyncOS 10.0 for Cisco Content Security Management Appliances User Guide
Chapter 1 Introduction
Cisco Content Security Management Overview
Cisco Content Security Management Overview
AsyncOS for Cisco Content Security Management incorporates the following features:
•
External Spam Quarantine: Hold spam and suspected spam messages for end users, and allow end
users and administrators to review messages that are flagged as spam before making a final
determination.
users and administrators to review messages that are flagged as spam before making a final
determination.
•
Centralized Policy, Virus, and Outbreak Quarantines: Provide a single interface for managing
these quarantines and the messages quarantined in them from multiple Email Security appliances.
Allows you to store quarantined messages behind the firewall.
these quarantines and the messages quarantined in them from multiple Email Security appliances.
Allows you to store quarantined messages behind the firewall.
Enhanced AMP
Reports
Reports
Advanced Malware Protection page includes the following enhancements:
•
A new graph that shows the incoming files handled by AMP in percentage
based on the verdicts (Clean, Malicious, Unknown, Unscannable).
based on the verdicts (Clean, Malicious, Unknown, Unscannable).
•
A new graph that shows the top incoming malware files based on the file types.
•
A new table that shows the number of incoming files handled by AMP based
on the verdicts (Clean, Malicious, Unknown, Unscannable). Click on the file
count to view the related messages in Message Tracking.
on the verdicts (Clean, Malicious, Unknown, Unscannable). Click on the file
count to view the related messages in Message Tracking.
•
Incoming Malware Threat Files Report
–
Incoming Malware Threat Files report now shows the name of the file(s)
associated with a SHA-256 hash.
associated with a SHA-256 hash.
–
If you click on a SHA-256 hash, a new page that shows file reputation and
analysis summary for the specified SHA-256 hash is displayed.
analysis summary for the specified SHA-256 hash is displayed.
–
Click on the number of infected messages to view the related messages in
Message Tracking.
Message Tracking.
File Analysis page includes the following enhancements:
•
Completed Analysis Requests from This Appliance and Pending Analysis
Requests from This Appliance reports include the following enhancements:
Requests from This Appliance reports include the following enhancements:
–
Reports now show the name of the file(s) associated with a SHA-256 hash.
–
Click on Details to view the related messages in Message Tracking.
•
A new report that shows the number of files uploaded for file analysis.
AMP Verdict Updates page includes the following enhancements:
•
Files with Retrospective Verdict Changes report now shows the name of the
file(s) associated with a SHA-256 hash.
file(s) associated with a SHA-256 hash.
•
Files with Retrospective Verdict Changes report now shows the old disposition
for a given SHA-256 hash.
for a given SHA-256 hash.
•
If you click on a SHA-256 hash, a new page that shows file reputation and
analysis summary for the specified SHA-256 hash is displayed.
analysis summary for the specified SHA-256 hash is displayed.
•
Click on Details to view the related messages in Message Tracking.