Best practises for File types

[kostasthedelegate]

Hello, 

I would like to ask what are the recommended file types to include for file analysis in ESA?

Are there any best practices from Cisco?

Regards, 

Konstantinos

[balaji.bandi]

If you have AMP in your environement below guide should help you :

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/215165-best-practice-guide-for-advanced-malware.html

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010000.html

[kostasthedelegate]

Hello and thank you for the prompt response. 

I have AMP licenses for ESA and not separate infrastructure. 

These guides are helpful but I was searching sth more specific which will include certain filetypes. 

Regards,

Konstantinos

[balaji.bandi]

yes i mean AMP ESA, you can find the information - again this is based on requirement - place to place change.

where i worked with some clients, do not like some  files to scan.

[kostasthedelegate]

Hello, 

Ok thank you 

I will try to figure out what the customer is using!

Regards, 

Konstantinos