Cisco Cisco Web Security Appliance S170 사용자 가이드
13-8
AsyncOS 8.6 for Cisco Web Security Appliances User Guide
Chapter 13 File Reputation Filtering and File Analysis
File Reputation and File Analysis Reporting and Tracking
•
Configuring Centralized Reporting for Advanced Malware Protection Features
If you will centralize reporting on a Security Management appliance, see important configuration
requirements in the Advanced Malware Protection sections in the web reporting chapter of the online
help or user guide for your management appliance.
requirements in the Advanced Malware Protection sections in the web reporting chapter of the online
help or user guide for your management appliance.
File Reputation and File Analysis Reporting and Tracking
•
•
•
•
Identifying Files by SHA-256 Hash
Because filenames can easily be changed, the appliance generates an identifier for each file using a
Secure Hash Algorithm (SHA-256). If an appliance processes the same file with different names, all
instances are recognized as the same SHA-256. If multiple appliances process the same file, all instances
of the file have the same SHA-256 identifier.
Secure Hash Algorithm (SHA-256). If an appliance processes the same file with different names, all
instances are recognized as the same SHA-256. If multiple appliances process the same file, all instances
of the file have the same SHA-256 identifier.
•
In most reports, files are listed by their SHA-256 value (in an abbreviated format). To identify the
filenames associated with a malware instance in your organization, select Reporting > Advanced
Malware Protection and click an SHA-256 link in the table. The details page shows associated
filenames.
filenames associated with a malware instance in your organization, select Reporting > Advanced
Malware Protection and click an SHA-256 link in the table. The details page shows associated
filenames.