“Other potential malicious file types”

[anotthak8]

Hello,

I am looking at our AMP settings in the IronPort and I noticed “Other potential malicious file types”. Is this a new feature? Also, is there a way to check from the GUI what are daily file upload limit is?

Thank you in advance!

[dmccabej]

Hello,

Yes, the 'Other potentially malicious file types' is a newer feature and was added in 9.7.1.

You can view more details about what those file-types are and daily upload limits within this guide : File Criteria for Advanced Malware Protection Services for Cisco Content Security Products

Thanks!

-Dennis M.

[syeda3]

Yes, this is the new feature added in 9.7.1 in which cisco periodically checks for potentially malicious file types to prevent zero day threats. If new threats are identified, details of such file types are sent to your appliance through updater servers. If you enable this functionality, your appliance will send such file types for analysis in addition to the file types you have selected.

For more details please see the release notes.

http://www.cisco.com/c/dam/en/us/td/docs/security/esa/esa9-7/ESA_9-7-1_Release_Notes.pdf

Hope to help.