Cisco Cisco Email Security Appliance C170 Guia Do Utilizador

Adjust the following Advanced Settings as needed:

Do not change any other settings in this section without guidance from Cisco support. 

 Submit and commit your changes. 

Select Mail Policies > Incoming Mail Policies.

Click the link in the Advanced Malware Protection column of the mail policy to modify. 

Choose options.

If you do not want to send files to the cloud, for example for confidentiality reasons, uncheck Enable 
File Analysis.

Select the actions that AsyncOS must perform if an attachment is considered Unscannable. 
Attachments are considered Unscannable when the appliance is unable to obtain information from 
the file reputation service for any reason, for example because the connection timed out. 

Select the following:

Whether to deliver or drop the message.

Whether to archive the original message. Archived messages are stored as an mbox-format log 
file in the 

amparchive

 directory on the appliance. The preconfigured AMP Archive 

(

amparchive

) log subscription is required.

Whether to warn the end user by modifying the message subject, for example, [WARNING: 
ATTACHMENT(S) MAY CONTAIN MALWARE].

Whether to add a custom header to provide granular controls to the administrator.

Select the actions that AsyncOS must perform if an attachment is considered Malicious. Select the 
following:

SSL Communication for File Reputation

Check Use SSL (Port 443) to communicate on port 443 
instead of the default port, 32137.

This option also allows you to configure an upstream proxy 
for communication with the file reputation service.

SSL communication over port 32137 may require 
you to open that port in your firewall.

Reputation Threshold

Use value from Cloud Service

Enter custom value

The upper limit for acceptable file reputation scores. 
Scores above this threshold indicate the file is infected.