Cisco Cisco Web Security Appliance S690 Guida Utente

Pagina di 430
 
13-6
AsyncOS 8.1 for Cisco Web Security User Guide
 
Chapter 13      File Reputation Filtering and File Analysis
  Configuring File Reputation and Analysis Features
Note
Do not change any other Advanced settings without guidance from Cisco support. 
Step 8
Submit and commit your changes. 
Configuring File Reputation and Analysis Service Action Per Access Policy 
Procedure 
Step 1
Select Web Security Manager > Access Policies
Step 2
Click the link in the Anti-Malware and Reputation column for a policy in the table. 
Step 3
In the Advanced Malware Protection Settings section, select Enable File Reputation Filtering and 
File Analysis
If File Analysis is not enabled globally, only File Reputation Filtering is offered. 
Step 4
Select an action for Known Malicious and High-Risk FilesMonitor or Block
The default is Monitor. 
Step 5
Submit and commit your changes. 
  
Ensuring That You Receive Alerts 
Ensure that the appliance is configured to send you alerts related to Advanced Malware Protection.  
You will receive alerts when: 
Alert Description 
Type 
Severity 
Feature keys expire 
(As is standard for all features)
The file reputation or file analysis service is unreachable
Anti-Malware
Warning
Communication with cloud services is established
Anti-Malware
Info
A file reputation verdict changes 
Anti-Malware
Info
File types that can be sent for analysis have changed. You 
may want to enable upload of new file types. 
Anti-Malware
Info