User Guide

16-5
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 16 File Reputation Filtering and File Analysis
Configuring File Reputation and Analysis Features
• Advanced Malware Protection and Clusters, page 16-10
• Ensuring That You Receive Alerts About Advanced Malware Protection Issues, page 16-11
• Configuring Centralized Reporting for Advanced Malware Protection Features, page 16-11
Requirements for Communication with File Reputation and Analysis Services
• All Email Security appliances that use these services must be able to connect to them directly over
the internet.
• By default, communication with file reputation analysis services is routed through the interface that
is associated with the default gateway. To route this traffic through a different interface, create a
static route for each address in the Advanced section of the Security Services > File Reputation and
Analysis page.
• For information about required open firewall ports, see Appendix D, “Firewall Information.”
Related Topics
• Configuring TCP/IP Traffic Routes, page 33-59
Enabling and Configuring File Reputation and Analysis Services
Before You Begin
• Acquire feature keys for the file reputation service and the file analysis service.
• Meet the Requirements for Communication with File Reputation and Analysis Services, page 16-5.
• Verify connectivity to the update servers configured on the Updates page .
Procedure
Step 1 Select Security Services > File Reputation and Analysis.
Step 2 Click Enable.
Step 3 Click Edit Global Settings.
Step 4 Select Enable File Reputation.
Step 5 Accept the license agreement if presented.
Step 6 File Analysis is enabled by default. If you do not uncheck Enable File Analysis, the File Analysis
feature key will be activated after the next commit.
Step 7 In the File Analysis section, select the file types to send to the cloud for analysis.