What is a required prerequisite to enable malware file scanning for the Secure Internet Gateway?

IP Layer enforcement primarily blocks traffic based on IP addresses and ports at a lower network layer and does not involve the deep content inspection required for malware file scanning.

While an Advanced Malware Protection (AMP) license is required to activate the malware scanning features, enabling the Intelligent Proxy is the architectural prerequisite that allows the SIG to intercept and inspect files for scanning.

SSL decryption is necessary to inspect encrypted traffic for malware, but the Intelligent Proxy is the fundamental component that enables the SIG to intercept and process all web traffic, whether encrypted or not, for scanning.

To enable malware file scanning for a Secure Internet Gateway (like Cisco Umbrella SIG), the Intelligent Proxy must be enabled. The Intelligent Proxy is essential because it intercepts and steers web traffic, including file downloads, for inspection by security engines, which is a necessary step before any malware analysis can occur.