Configuring custom duplicate malicious file analysis using the CLI

Use the CLI commands in this topic to set or clear the amount of time between submissions of malicious files that the system will evaluate in order to identify a second submission as a duplicate malicious file. Setting a non-zero value for timeout will enable duplicate detection. Clearing the timeout will turn off the duplicate detection.

To enable duplicate malicious file detection and set the interval for duplicate malicious file analysis:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the time span in hours for detecting duplicate malicious files.

hostname (config) # analysis duplicate malicious file timeout <hours>

Verify the configuration with "show analysis config" command.
```
hostname (config) # show analysis config
.....
Malicious duplicate file timeout         : 8
.....
```
The "Malicious duplicate file timeout" line displays the set timeout for duplicate malicious file analysis.

Example

The following example will set the time interval for detecting duplicate malicious files to 8 hours:

hostname (config) # analysis duplicate malicious file timeout 8

To skip duplicate malicious file analysis:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify 0 timeout to turn off duplicate detection for malicious files.
hostname (config) # analysis duplicate malicious file timeout 0
Verify the configuration with "show analysis config" command.
```
hostname (config) # show analysis config
.....
Malicious duplicate file timeout         : 0
.....
```
The "Malicious duplicate file timeout" line will display the set timeout as 0 for duplicate malicious file analysis.

Note
Setting timeout to 0 turns off duplicate malicious file checks.

Example

The following example will turn off detecting duplicate malicious files:

hostname (config) # analysis duplicate malicious file timeout 0