User Guide

16-11
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 16 File Reputation Filtering and File Analysis
File Reputation and File Analysis Reporting and Tracking
Ensuring That You Receive Alerts About Advanced Malware Protection Issues
Ensure that the appliance is configured to send you alerts related to Advanced Malware Protection.
You will receive alerts when:
Related Topics
• Several Alerts About Failure to Connect to File Reputation or File Analysis Servers, page 16-14
• Taking Action When File Threat Verdicts Change, page 16-13
Configuring Centralized Reporting for Advanced Malware Protection Features
If you will centralize reporting on a Security Management appliance, see important configuration
requirements in the Advanced Malware Protection sections in the email reporting chapter of the online
help or user guide for your management appliance.
File Reputation and File Analysis Reporting and Tracking
• Identifying Files by SHA-256 Hash, page 16-11
• File Reputation and File Analysis Report Pages, page 16-12
• Viewing File Reputation Filtering Data in Other Reports, page 16-12
• About Message Tracking and Advanced Malware Protection Features, page 16-12
Identifying Files by SHA-256 Hash
Because filenames can easily be changed, the appliance generates an identifier for each file using a
Secure Hash Algorithm (SHA-256). If an appliance processes the same file with different names, all
instances are recognized as the same SHA-256. If multiple appliances process the same file, all instances
of the file have the same SHA-256 identifier.
Alert Description Type Severity
Feature keys expire (As is standard for all features)
The file reputation or file analysis service is unreachable. System Warning
Communication with cloud services is established. System Info
The reputation and analysis engine is restarted by a watchdog
service
System Info
A file reputation verdict changes. System Info
File types that can be sent for analysis have changed. You
may want to enable upload of new file types.
System Info
Analysis of some file types is temporarily unavailable. System Warning
Analysis of all supported file types is restored after a
temporary outage.
System Info