Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Página de 1197
 
17-8
AsyncOS 9.0 for Cisco Web Security Appliances User Guide
 
Chapter 17      File Reputation Filtering and File Analysis
  Configuring File Reputation and Analysis Features
If you enter the Group ID incorrectly or need to change it for any other reason, you must open a case 
with Cisco TAC. 
This change takes effect immediately; it does not require a Commit. 
This value must be identical on all appliances that will share data about files that are uploaded for 
analysis.
It is suggested to use your CCOID for this value. However, this entry is not validated for accuracy. 
This value is case-sensitive. 
All appliances in the group must be configured to use the same File Analysis server in the cloud. 
An appliance can belong to only one group. 
You can add a machine to a group at any time, but you can do it only once. 
Step 3
Click Group Now
Which Appliances Are In the Analysis Group? 
Step 1
Select Security Services > File Reputation and Analysis
Step 2
In the Appliance Grouping for File Analysis Cloud Reporting section, click  View Appliances 
Step 3
To view the File Analysis Client ID of a particular appliance, look in the following location: 
Configuring the Incoming Mail Policy for File Reputation Scanning and File 
Analysis
Procedure 
Step 1
Select Mail Policies > Incoming Mail Policies.
Step 2
Click the link in the Advanced Malware Protection column of the mail policy to modify. 
Step 3
Choose options.
If you do not have an on-premises Cisco AMP Threat Grid Appliance and you do not want to send 
files to the cloud, for example for confidentiality reasons, uncheck Enable File Analysis.
Appliance 
Location of File Analysis Client ID 
Email Security 
appliance
Advanced Settings for File Analysis section 
on the Security Services > File Reputation and Analysis page. 
Web Security 
appliance 
Advanced Settings for File Analysis section 
on the Security Services > Anti-Malware and Reputation page.
Security Management 
appliance
At the bottom of the Management Appliance > Centralized Services > 
Security Appliances
 page.