Use the CLI commands in this procedure to add or delete riskware detection custom policy rules on the Email Security - Server appliance.
Note
You can add as many file extensions as you want.
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Add a particular policy rule file extension.
hostname (config) # analysis custom riskware file-extension <extension>
Verify the status of a custom policy rule for riskware detection for blocking or alert.
hostname (config) # show analysis custom riskware file-extension
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Locate the policy rule ID you want to disable.
hostname (config) # show analysis custom riskware file-extensionDisable a particular policy rule ID.
hostname (config) # no analysis custom riskware file-extension <rule_ID>
Verify the status of a custom policy rule for riskware detection.
hostname (config) # show analysis custom riskware file-extension
Examples
This example enables a custom policy rule ID for riskware detection.
hostname (config) # analysis custom riskware file-extension exe
This example disables a custom policy rule ID for riskware detection.
hostname (config) # no analysis custom riskware file-extension 13
This example shows the current custom policy rule configuration for riskware detection.
hostname (config) # show analysis custom riskware file-extension Policy Type: riskware Id: : 13 UUID: : 3f23234c-1476-410e-a70f-e5e160e97857 Rule Type: : extension Source: : Custom Extension: : exe Signature: : Custom.Extension.Alert.exe Id: : 12 UUID: : c29f7057-3c33-45e8-ac36-6423a2d7652d Rule Type: : extension Source: : Custom Extension: : tt Signature: : Custom.Extension.Alert.tt Id: : 11 UUID: : 02a61a22-7b09-467b-ae4f-7cb98926f8b7 Rule Type: : extension Source: : Custom Extension: : ss Signature: : Custom.Extension.Alert.ss