Cisco Bug: CSCvu10218 - ENH - Need a change in the AMP the behaviour.
May 05, 2020
- Cisco Email Security Appliance
Known Affected Releases
Symptom: Customer doesn't believe in the local verdict given by the AMP running on the ESA, and they want all the attachments to be stripped and sent to the AMP for verdict, irrespective of the fact that if the AMP knows or does not have a local verdict for the file. Conditions: Customer has AMP enabled on the ESA. Currently attachments that does not have a verdict are sent to FIle-Analysis, for scanning and once the verdict is available, the e-mail is released back to the work-queue and this time it will have a verdict. Customer doesn't believe in local AMP verdict, and wants ESA to strip all attachments and send it to AMP for analysis, and once the scanning is completed, the AMP wants to send back the attachment back to the ESA, and the ESA needs to attach back the attachment back to the e-mail and deliver it to the end user.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.
Bug Details Include
- Full Description (including symptoms, conditions and workarounds)
- Known Fixed Releases
- Related Community Discussions
- Number of Related Support Cases