Guest

Preview Tool

Cisco Bug: CSCvu10218 - ENH - Need a change in the AMP the behaviour.

Last Modified

May 05, 2020

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

13.0.0-392

Description (partial)

Symptom:
Customer doesn't believe in the local verdict given by the AMP running on the ESA, and they want all the attachments to be stripped and sent to the AMP for verdict, irrespective of the fact that if the AMP knows or does not have a local verdict for the file.

Conditions:
Customer has AMP enabled on the ESA.

Currently attachments that does not have a verdict are sent to FIle-Analysis, for scanning and once the verdict is available, the e-mail is released back to the work-queue and this time it will have a verdict.

Customer doesn't believe in local AMP verdict, and wants ESA to strip all attachments and send it to AMP for analysis, and once the scanning is completed, the AMP wants to send back the attachment back to the ESA, and the ESA needs to attach back the attachment back to the e-mail and deliver it to the end user.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.