Cisco Cisco Web Security Appliance S390 Guida Utente

Information about Advanced Malware Protection including File Analysis is logged in Access Logs or in 
AMP Engine Logs. For more information, see the chapter on monitoring system activity through logs. 

In the log message "Response received for file reputation query" possible values for "upload action" are: 

0: The file is known to the reputation service; do not send for analysis. 

1: Send 

2: The file is known to the reputation service; do not send for analysis.

 

You receive several alerts about failures to connect to the file reputation or analysis services in 

the cloud. (A single alert may indicate only a transient issue.) 

Ensure that you have met the requirements in 

. 

Check for network issues that may prevent the appliance from communicating with the cloud 
services. 

Increase the Query Timeout value: 

Select Security Services > Anti-Malware and Reputation . The Query Timeout value is in the 
Advanced settings area of the Advanced Malware Protection Services section. 

You receive an API key alert when attempting to view File Analysis report details, or the  Web 

Security appliance is unable to connect to the AMP Threat Grid server to upload files for analysis. 

This error can occur if you change the hostname of the AMP Threat Grid server and you are 

using a self-signed certificate from the AMP Threat Grid server, as well as possibly under other 
circumstances. To resolve the issue: 

Generate a new certificate from the AMP Threat Grid appliance that has the new hostname. 

Upload the new certificate to the  Web Security appliance. 

Reset the API key on the AMP Threat Grid appliance. For instructions, see the online help on the 
AMP Threat Grid appliance.