Cisco Cisco Web Security Appliance S690 사용자 가이드

다운로드
페이지 494
 
14-11
AsyncOS 9.1.1 for Cisco Web Security Appliances User Guide
 
Chapter 14      File Reputation Filtering and File Analysis
  File Reputation and File Analysis Reporting and Tracking
Related Topics 
Configuring Centralized Reporting for Advanced Malware Protection Features 
If you will centralize reporting on a Security Management appliance, see important configuration 
requirements in the Advanced Malware Protection sections in the web reporting chapter of the online 
help or user guide for your management appliance. 
File Reputation and File Analysis Reporting and Tracking 
Identifying Files by SHA-256 Hash 
Because filenames can easily be changed, the appliance generates an identifier for each file using a 
Secure Hash Algorithm (SHA-256). If an appliance processes the same file with different names, all 
instances are recognized as the same SHA-256. If multiple appliances process the same file, all instances 
of the file have the same SHA-256 identifier. 
In most reports, files are listed by their SHA-256 value (in an abbreviated format). To identify the 
filenames associated with a malware instance in your organization, select Reporting > 
Advanced Malware Protection and click an SHA-256 link in the table. The details page shows associated 
filenames.  
Analysis of some file types is temporarily unavailable. 
Anti-Malware
Warning
Analysis of all supported file types is restored after a 
temporary outage. 
Anti-Malware
Info
Alert Description 
Type 
Severity