I have some questions about AMP Rules about Malware Cloud Lookup with Firepower Management Center(FMC).
Some documents says that with these rules, the FMC will sends the SHA256 hash of a file to the cloud for analysis. How the SHA256 hash is calculated, i mean with which part of file, i guess it should use the whole file to calculated SHA256, but in my lab, even with the same file, it calculated different values. So, i was confused.
The other question is that, how the FMC connect to the AMP public cloud. Do i need a classic license for FMC? I only have evaluation license now, only for self-studying.
Thanks!
