Configuring custom duplicate malicious URL analysis using the CLI

Prev Next

Use the CLI commands in this topic to set or clear the amount of time between submissions of malicious URLs that the system will evaluate in order to identify a second submission as a duplicate malicious URL. Setting a non-zero value for timeout will enable duplicate detection. Clearing the timeout will turn off the duplicate detection.

To enable duplicate malicious URL detection and set timeout for duplicate malicious URL analysis:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify the time span in hours for detecting duplicate malicious URLs.

    hostname (config) # analysis duplicate malicious url timeout <hours>
  3. Verify the configuration with "show analysis config" command.

    hostname (config) # show analysis config
    .....
    Malicious duplicate url timeout         : 8
    .....

    The "Malicious duplicate url timeout" line displays the set timeout for duplicate malicious URL analysis.

Example

The following example will set the time interval for detecting duplicate malicious URLs to 8 hours:

hostname (config) # analysis duplicate malicious url timeout 8
To skip duplicate malicious URL analysis:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify 0 timeout to turn off duplicate detection for malicious URLs.

    hostname (config) # analysis duplicate malicious url timeout 0

  3. Verify the configuration with "show analysis config" command.

    hostname (config) # show analysis config
    .....
    Malicious duplicate url timeout         : 0
    .....

    The "Malicious duplicate url timeout" line will display the set timeout as 0 for duplicate malicious URL analysis.

Note

Setting timeout to 0 turns off malicious URL duplicate checks.

Example

The following example will turn off detecting duplicate malicious URLs:

hostname (config) # analysis duplicate malicious url timeout 0