Guest

Preview Tool

Cisco Bug: CSCur68135 - Mail logs related to File upload information of child files missing

Last Modified

Feb 15, 2017

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

9.0.0-beta2-390

Description (partial)

Symptom:
All AMP activity related to ?MID  detail,   SHA  hash value , filename,   and queued for possible file analysis upload? for EXE files  do not get logs under the regular mail logs.

Example, an EXE file passing through an appliance running teh AMP service should log this example event  when processing an EXE attachment "MID 1000 SHA gjhkjhl.........6f87125d1c1d175e4b7b4f08647f8cbf293 filename badfile.exe queued for possible file analysis upload"

Conditions:
Processing of exe file types, and have have File Reputation and Analysis enabled under security services
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.