Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Submit and commit your changes. 

If you are using an on-premises Cisco AMP Threat Grid appliance, you must activate the account for this 
appliance on the AMP Threat Grid appliance: 

Note the File Analysis Client ID that appears at the bottom of the page. 

Sign in to the AMP Threat Grid appliance.

Select Welcome... > Manage Users. 

Locate the "user" account for the File Analysis Client ID of your Email Security appliance. 

Activate this "user" account for your appliance. 

Select Mail Policies > Incoming Mail Policies.

Click the link in the Advanced Malware Protection column of the mail policy to modify. 

File Analysis 
Server URL 

Select Private cloud. 

Server

URL of the on-premises Cisco AMP Threat Grid Appliance. Use the hostname, not the 
IP address, for this value and for the certificate. 

If you change this hostname and you are using a self-signed certificate from the AMP 
Threat Grid server: 

Generate a new certificate from the AMP Threat Grid appliance that has the new 
hostname. 

Upload the new certificate to the Email Security appliance. 

Reset the API key on the AMP Threat Grid appliance. See the AMP Threat Grid 
online help for information. 

Certificate

Do one of the following: 

Select the Cisco default certificate authority. 

Upload a self-signed certificate that you have generated from your on-premises 
Cisco AMP Threat Grid Appliance. 

The most recently uploaded self-signed certificate is used. It is not possible to 
access a certificate uploaded prior to the most recent certificate; if needed, upload 
the desired certificate again.