Change in Cloud SWG MAAS (Malware Analysis Advanced Service) post-download detection Email alert.

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

The Malware Analysis Advanced Service feature within the Web Security Service (Cloud SWG) triggers an administrative email alert following post-download detection (provided that Malware Analysis notification is enabled from the portal).

For threats that are assigned a Risk Score of 7 or higher, the Malware Analysis System used to append a detailed PDF file outlining the identified threat to the alert.

With the new enhancement, Malware Analysis email alerts will now include a link to metadata about the object scanned, but for all suspicious and malicious files only (clean files will not generate any reports).

Note: The Malware Analysis detection threshold and the volume of the email alerts remain unchanged with this change.

Environment

Web Security Service (Cloud SWG) with MAAS (Malware Analysis Advanced Service) entitlement.

Resolution

Here is the list of Malware Analysis Risk Scores