Cisco Cisco Email Security Appliance C160 Mode D'Emploi
16-11
Cisco AsyncOS 8.5.5 for Email Security User Guide
Chapter 16 File Reputation Filtering and File Analysis
Troubleshooting File Reputation and Analysis
In the log message "Response received for file reputation query" possible values for "upload action" are:
•
0: The file is known to the reputation service; do not send for analysis.
•
1: Send
•
2: The file is known to the reputation service; do not send for analysis.
Using Trace
Trace is not available for the file reputation filtering and analysis features. Instead, send a test message
from an account outside your organization.
from an account outside your organization.
Multiple Alerts About Failed File Reputation Queries
Problem
You receive multiple alerts about failures to query the file reputation service.
Solution
•
Ensure that you have met the requirements in
.
•
Check for network issues that may prevent the appliance from communicating with the cloud
services.
services.
•
Increase the Query Timeout value:
Select Security Services > File Reputation and Analysis. The Query Timeout value is in the
Advanced settings area.
Advanced settings area.
File Upload for Analysis Fails Repeatedly
Problem
You receive an alert that uploading files for analysis has failed repeatedly.
Solution
•
Ensure that you have met the requirements in
.
•
Check your network for issues.
•
If the problem persists, contact Cisco support.
Many Files Have Verdict "Unscannable"
Problem
Many files have an "Unscannable" verdict.
Solution
This can happen if there are connection issues between the appliance and the file reputation
services in the cloud. Try the following:
•
Check for issues on your network.
•
Increase the timeout value on the Security Services > File Reputation and Analysis page.
•
Check for an alert about communication errors between the cloud services and the appliance.