FMC AMP for Network Status

[Zachary Ballard]

I patched our FMC from 6.4.0.2 to 6.4.0.7. I am receiving a warning that states " Successfully connected to cloud, Number of files detected in traffic exceeds module threshold." 

Is this something that will clear itself up in time? This warning was not present before patching.

Thanks!!

[Marvin Rhoads · Accepted solution]

The patch may have made something visible that was there all along.

The message is indicating that you have sent more than 200 files in a 24-hour period to AMP cloud for ThreatGrid analysis. 

I usually see this when applying a file policy on east-west traffic (i.e. between users and file servers) where the policy indicates to send unknown files on for analysis.