- January 14, 2020 at 1:44 pm
khanyash: WhitelistCloud snapshot scan uploads the files every time?
WLC will first check to see if that specific file (by SHA-256) has been analyzed before, and if it has then it does not be analyzed again, so it just returns the result (very quickly). If that specific file has not been analyzed before then it needs to upload the file for analysis, which can be slow depending on the user’s upload speed and the size of the file. WLC then stores the result in the cloud database so that the next time an endpoint analyzes that specific file, the file does not need to be uploaded again, it simply looks up the result in the database.
If for some odd reason you find that WLC is uploading every single file, that means that your connection to the WLC database is being blocked, in which case, please let me know because we need to figure out why.10