.HTA file signature in AMP for networks

[ethutchinson]

We are running two Firepower 1140s managed by a FMCv. Both are running 7.2.7. We have the AMP for networks subscription. When I search in my Malware/File policy to scan for .hta files I cannot find that extension. Has anyone else been successful in setting up AMP for networks to scan for this file type.

[Marvin Rhoads]

The .hta file type is not supported by the AMP public cloud. The following technote is for AMP for Endpoints (now Secure Endpoint) but it also applies to AMP for Networks running your firewall File Policy.

https://www.cisco.com/c/en/us/support/docs/security/advanced-malware-protection-endpoints/118711-technote-fireamp-00.html