User Guide

Contents
xii
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Reporting Uncategorized and Misclassified URLs 15-21
Future URL Category Set Changes 15-22
CHAPTER 16 File Reputation Filtering and File Analysis 16-1
Overview of File Reputation Filtering and File Analysis 16-1
File Threat Verdict Updates 16-1
File Processing Overview 16-2
Which Files Are Evaluated and Analyzed? 16-3
FIPS Compliance 16-4
Configuring File Reputation and Analysis Features 16-4
Requirements for Communication with File Reputation and Analysis Services 16-5
Enabling and Configuring File Reputation and Analysis Services 16-5
Configuring the Incoming Mail Policy for File Reputation Scanning and File Analysis 16-6
Quarantining Messages with Attachments Sent for Analysis 16-7
Using the File Analysis Quarantine 16-8
Centralized File Analysis Quarantine 16-10
X-Headers for File Reputation and Analysis 16-10
Sending Notifications to End Users about Dropped Messages or Attachments 16-10
Advanced Malware Protection and Clusters 16-10
Ensuring That You Receive Alerts About Advanced Malware Protection Issues 16-11
Configuring Centralized Reporting for Advanced Malware Protection Features 16-11
File Reputation and File Analysis Reporting and Tracking 16-11
Identifying Files by SHA-256 Hash 16-11
File Reputation and File Analysis Report Pages 16-12
Viewing File Reputation Filtering Data in Other Reports 16-12
About Message Tracking and Advanced Malware Protection Features 16-12
Taking Action When File Threat Verdicts Change 16-13
Troubleshooting File Reputation and Analysis 16-13
Log Files 16-14
Using Trace 16-14
Several Alerts About Failure to Connect to File Reputation or File Analysis Servers 16-14
Many Files Have Verdict "Unscannable" 16-15
CHAPTER 17 Data Loss Prevention 17-1
Overview of Data Loss Prevention 17-1
Overview of the DLP Scanning Process 17-2
How Data Loss Prevention Works 17-2
DLP Deployment Options 17-3
System Requirements for Data Loss Prevention 17-4