Cisco Cisco Email Security Appliance C160 Références techniques

Page de 328
 
3-5
CLI Reference Guide for AsyncOS 10.0 for Cisco Email Security Appliances
 
Chapter 3      The Commands: Reference Examples
  Advanced Malware Protection
Do you want this appliance to display detailed analysis reports for files uploaded to the 
cloud from other appliances in your organization, and vice-versa? [Y]>
Enter an Analysis Group name. This name is case-sensitive and must be configured 
identically on each appliance in the Analysis Group.
[]> FA_Reporting
Registration is successful with the group name. This does not require commit
File Reputation: Enabled
File Analysis: Enabled
File types selected for File Analysis:
    Microsoft Windows / DOS Executable
Appliance Group ID/Name: FA_Reporting
Choose the operation you want to perform:
- SETUP - Configure Advanced-Malware protection service.
- ADVANCED - Set values for AMP parameters (Advanced configuration).
- VIEWGROUP - view the group members details.
- CLEARCACHE - Clears the local File Reputation cache.
[]>
Note
After you configure an appliance group, you cannot use the 
setgroup
 subcommand. If you want to need 
to modify the group for any reason, you must open a case with Cisco TAC.
You can view the details of the appliance group using the 
viewgroup
 subcommand. 
Configure Email Security Appliance to Use an On-Premises File Analysis Server
mail.example.com> ampconfig
File Reputation: Enabled
File Analysis: Enabled
File types selected for File Analysis:
    Microsoft Windows / DOS Executable
Choose the operation you want to perform:
- SETUP - Configure Advanced-Malware protection service.
- ADVANCED - Set values for AMP parameters (Advanced configuration).
- SETGROUP - Add this appliance to the group of appliances that can share File Analysis 
reporting details.
- CLEARCACHE - Clears the local File Reputation cache.
[]> advanced
Enter cloud query timeout?
[15]>
Choose a file reputation server:
1. AMERICAS (cloud-sa.amp.sourcefire.com)
2. Private reputation cloud
[1]> 
Enter cloud domain?
[a.immunet.com]>
Do you want use the recommended reputation threshold from cloud service? [Y]> 
Enter heartbeat interval?
[15]> 
Do you want to enable SSL communication (port 443) for file reputation? [N]>