Hi Joel,
The files with verdict unknown from file reputation are held in the dynamic file analysis quarantine after the file is uploaded for analysis.
Depending on the retention time the file would remain in quarantine and be released automatically if a verdict is received or if the retention time expires. Depending on the file it could take up to 15 minutes to receive a verdict from the file analysis server, unless there is an ongoing issue on the cloud server.
If you are seeing multiple delays in receiving verdicts for the file analysis server, I would recommend opening a TAC case to get that checked.
Customers who purchase the Threat Grid Cloud Premium Subscription can view and access Panacea in order to access the Threat Grid Dashboard, submit samples and view processing via virtual sand box, and research/search further indicators, information provided from Threat Grid. Further information is found in the Cisco AMP Threat Grid Ordering Guide.
AMP Threat Grid Cloud Premium Subscriptions
L-TG-S1-LIC-K9 = Cisco AMP Threat Grid, 5 Accounts and 500 Daily Submissions
L-TG-S2-LIC-K9 = Cisco AMP Threat Grid, 10 Accounts and 1500 Daily Submissions
L-TG-S3-LIC-K9 = Cisco AMP Threat Grid, 25 Accounts and 2500 Daily Submissions
L-TG-S4-LIC-K9 = Cisco AMP Threat Grid, 100 Accounts and 10,000 Daily Submissions
Queries related Threat Grid Cloud Premium Subscription would be answered by you Sales/Account Team, or Reseller.
Thank You!
Libin Varghese
