Cisco Cisco Email Security Appliance C170

 

File Reputation 
Filtering and File 
Analysis 

Advanced Malware Protection identifies emerging and targeted file-based threats 
in downloaded files based on: 

File reputation 

File analysis (for certain files with unknown reputations) 

Updated verdicts after a file has been released to the network 

As new information becomes available about files, threat verdicts are updated, 
providing you with a starting point for investigating threats that were received 
before they were known even to the Advanced Malware Protection services. 

New reports identify infected files found by reputation, provide status and outcome 
of files sent for analysis, and list files for which verdicts have been updated. 
Existing reports have been updated with new sections or table columns to let you 
research users, sites, and trends involving infected files. 

URL filtering

URL filtering obtains the reputation and category of URLs in incoming and 
outgoing messages to allow several new functionalities: 

Anti-spam and outbreak filters now use the reputation and category of 
URLs in messages to help determine if a message is spam or malicious. 
This additional data improves the filtering accuracy for messages that 
contain URLs. 

You can further reduce the threat from potentially malicious sites by 
modifying URLs in delivered messages. You can make URLs 
unclickable, replace them with text, or redirect them to a proxy that 
evaluates the safety of a site if and when the recipient clicks the link, and 
blocks transactions it deems unsafe. You can create content and message 
filters to modify URLs based on categories of URL that are likely to be 
problematic. 

You can create content and message filters to enforce acceptable use 
policies based on the category of URLs in messages. For example, you 
can drop messages that include links in the Illegal Activities category. 

For more information, see 

 and the new 

URL Filtering chapter in the user guide or online help.