Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

File Size is Too Small

Hello,

I see in our SIEM thousand of events called "File Size is Too Small" but they don't seems related to a signature but to a specific URL visited with a js link.

 

Do you have experienced something similar?

 

Thank you!

R

3 REPLIES

Re: File Size is Too Small

Hi,

You are probably hitting a limit in advanced settings in Access Policy there is a setting called "Minimum file size for dynamic analysis testing" under Files and Malware Settings.
The default value is 15360 bytes, so it means that FMC is not sending smaller files for dynamic analysis.

br, Micke
Highlighted
Community Member

Re: File Size is Too Small

Hello Micke , thank you. I'm a bit surprised because we don't have AMP enabled (no license)

 

I would like to avoid those alerts or the IPS to scan those files, what is suggested to do?

Re: File Size is Too Small

In that case I would suggest you to open case with Cisco TAC.

br, Micke
132
Views
5
Helpful
3
Replies
CreatePlease to create content