AVG business, definition update triggering block in firepower

[Dieselboy]

I had a retrospective alert earlier for a download which firepower didn't know about. It sent it to the cloud for analysis and it was found to be malware. All subsequent update attempts have been blocked.
Not sure if this is a false positive as it was sent to the cloud for analysis and came back as malware.
I'll look into it tomorrow but this is interesting. May need to raise a tac or contact AVG but not sure yet until i look into it.

At the moment I'm not sure how or why it's being picked up as malware. Or if this to be expected due to the nature so needs a white list.

Anyone have any experience like this? 

[Dieselboy]

Cisco have advised me that they have looked into it and it is not malware. So they've marked it as clean.

Yay!

[deanwebb]

... are they suuuuuuuure?