Cisco Cisco Web Security Appliance S170 사용자 가이드
13-5
Cisco AsyncOS 8.0.6 for Web User Guide
Chapter 13 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
Related Topics
•
Enabling File Reputation and Analysis Services
Before You Begin
•
Acquire feature keys for the file reputation service and the file analysis service.
•
Meet the
Procedure
Step 1
Select Security Services > Anti-Malware and Reputation .
Step 2
Click Edit Global Settings.
Step 3
In the Advanced Malware Protection Services section, select Enable File Reputation Filtering.
Step 4
Accept the license agreement if presented.
Step 5
In the Advanced Malware Protection Services section, select Enable File Analysis.
Note
Do not change Advanced settings without guidance from Cisco support.
Step 6
(Optional) Adjust the Advanced settings for the reputation query:
For Connection To
Destination Network
Gateway
The file reputation service IP addresses of the Cloud Server Pool, as
configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
Anti-Malware and Reputation, Advanced
section.
IP address of the gateway for
the data port
the data port
The file analysis service
IP address of the File Analysis Server, as
configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
configured in Security Services >
Anti-Malware and Reputation, Advanced
section.
IP address of the gateway for
the data port
the data port
Option
Description
SSL Communication for File Reputation
Check Use SSL (Port 443) to communicate on port 443
instead of the default port, 32137.
instead of the default port, 32137.
This option also allows you to configure an upstream proxy
for file reputation.
for file reputation.
Note
SSL communication over port 32137 may require
you to open that port in your firewall.
you to open that port in your firewall.
Reputation Threshold
•
Use value from Cloud Service
•
Enter custom value
The upper limit for acceptable file reputation scores.
Scores above this threshold indicate the file is infected.
Scores above this threshold indicate the file is infected.