Cisco Cisco Web Security Appliance S390 ユーザーガイド
16-4
Cisco AsyncOS 8.5 for Email User Guide
Chapter 16 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
Configuring File Reputation and Analysis Features
•
•
•
•
•
Requirements for Communication with File Reputation and Analysis Services
•
All Web Security appliances that use these services must be able to connect to them directly over
the internet. An upstream proxy is not supported.
the internet. An upstream proxy is not supported.
•
By default, communication with file reputation and analysis services is routed through the
Management port (M1) on the appliance. If your appliance does not route data through the
management port, see
Management port (M1) on the appliance. If your appliance does not route data through the
management port, see
•
Communication with cloud services for file reputation and analysis occurs over IPv4.
•
The following firewall ports must be open:
Routing Traffic to File Reputation and File Analysis Servers Through a Data Interface
If the appliance is configured to restrict the management port to appliance management services only
(on the Network > Interfaces page), configure the appliance to route file reputation and analysis traffic
through the data port instead.
(on the Network > Interfaces page), configure the appliance to route file reputation and analysis traffic
through the data port instead.
Add routes for data traffic on the Network > Routes page. For general requirements and instructions, see
.
Firewall
Ports Description
Ports Description
Protocol
In/Out
Hostname
Appliance
Interface
Interface
32137
Access to cloud services
for obtaining file
reputation.
for obtaining file
reputation.
TCP
Out
As configured in Security Services >
Anti-Malware and Reputation, Advanced
section, Cloud Server Pool parameter.
Anti-Malware and Reputation, Advanced
section, Cloud Server Pool parameter.
Management,
unless a static
route is
configured to
route this
traffic through
a data port.
unless a static
route is
configured to
route this
traffic through
a data port.
443
Access to cloud services
for file analysis.
for file analysis.
TCP
Out
As configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
Anti-Malware and Reputation, Advanced
section.