Is it possible to detect malicious file in closed network environment?

[HWAN]

Hi teams,

I'd like to know FMC's malware detection feature.

As far as I know, AMP(Malware) license of FMC should work online because of sandboxing the files from Cisco TALOS.

If the FMC is installed in closed network environment, how can I detect some malware files?

Is there any way to install or update in person like VDB?

Thank you.

[Karsten Iwen · Accepted solution]

There is an on-prem option for AMP:

https://www.cisco.com/c/en/us/products/security/fireamp-private-cloud-virtual-appliance/index.html

But I never used it myself.