Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Advanced Malware 
Protection 

Shows file-based threats that were identified by the file reputation service.

To see the users who tried to access each SHA, and the filenames associated 
with that SHA-256, click a SHA-256 in the table. 

Clicking the link at the bottom of Malware Threat File Details report page 
displays all instances of the file in Web Tracking that were encountered 
within the maximum available time range, regardless of the time range 
selected for the report. 

For files with changed verdicts, see the AMP Verdict updates report. Those 
verdicts are not reflected in the Advanced Malware Protection report. 

If a file extracted from a compressed or archived file is malicious, only the 
SHA value of the compressed or archived file is included in the Advanced 
Malware Protection report.