Cisco Cisco Email Security Appliance C160 Mode D'Emploi
17-16
User Guide for AsyncOS 10.0 for Cisco Email Security Appliances
Chapter 17 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
Sending Notifications to End Users about Dropped Messages or Attachments
To send notifications to end users when a suspect attachment or its parent message has been dropped
based on file reputation scanning, use an X-header or Custom Header and Content Filters.
based on file reputation scanning, use an X-header or Custom Header and Content Filters.
Advanced Malware Protection and Clusters
If you use centralized management, you can enable Advanced Malware Protection and mail policies at
the cluster, group and machine level.
the cluster, group and machine level.
Feature keys must be added at the machine level.
Ensuring That You Receive Alerts About Advanced Malware Protection Issues
Ensure that the appliance is configured to send you alerts related to Advanced Malware Protection.
You will receive alerts when:
Related Topics
•
•
Configuring Centralized Reporting for Advanced Malware Protection Features
If you will centralize reporting on a Security Management appliance, see important configuration
requirements in the Advanced Malware Protection sections in the email reporting chapter of the online
help or user guide for your management appliance.
requirements in the Advanced Malware Protection sections in the email reporting chapter of the online
help or user guide for your management appliance.
Alert Description
Type
Severity
You are setting up a connection to an on-premises (private
cloud) Cisco AMP Threat Grid appliance and you need to
activate the account as described in
cloud) Cisco AMP Threat Grid appliance and you need to
activate the account as described in
Anti-Virus and AMP
Warning
Feature keys expire
(As is standard for all features)
The file reputation or file analysis service is unreachable.
Anti-Virus and AMP
Warning
Communication with cloud services is established.
Anti-Virus and AMP
Info
The reputation and analysis engine is restarted by a
watchdog service
watchdog service
Anti-Virus and AMP
Info
A file reputation verdict changes.
Anti-Virus and AMP
Info
File types that can be sent for analysis have changed. You
may want to enable upload of new file types.
may want to enable upload of new file types.
Anti-Virus and AMP
Info
Analysis of some file types is temporarily unavailable.
Anti-Virus and AMP
Warning
Analysis of all supported file types is restored after a
temporary outage.
temporary outage.
Anti-Virus and AMP
Info