On the Incidents page within the user interface of Advanced Threat Protection (ATP) Platform , the URL is missing for certain Vantage convictions.
When Vantage convicts a file that was download from an FTP server, the Incidents page does not display the URL. Despite the missing URL, the file was convicted and can be downloaded from the Incident Details tab. If the appliance operates in Inline Block mode, the file is blocked.