Enabling or disabling analysis of embedded URLs in files using the CLI

Prev Next

Follow these steps to enable or disable analysis of URLs that are embedded in PDF and Microsoft Office files of an email message on the Email Security - Server appliance.

To enable analysis of embedded URLs in files:
  1. Enable the CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Enable analysis of URLs that are embedded in files on the appliance.

    hostname (config) # static-analysis embedded-urls enable
  3. Verify the status of embedded URL analysis in files.

    hostname (config) # show static-analysis config
    
    Static Analysis enabled                : yes
       AV-suite enabled                    : yes
       SA on AV-suite whitelist enabled    : no
       AV-check enabled                    : yes
       Dropper enabled                     : yes
       YARA enabled                        : yes
    
    Embedded object extraction enabled     : yes
    Embedded URL extraction enabled        : yes
    ......

    The "Embedded URL extraction enabled:" line displays "yes" if embedded URL analysis is enabled.

To disable analysis of embedded URLs in files:
  1. Enable the CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Disable analysis of URLs that are embedded in files on the appliance.

    hostname (config) # no  static-analysis embedded-urls enable
  3. Verify the status of embedded URL analysis in files.

    hostname (config) # show static-analysis config
    
    Static Analysis enabled                : yes
       AV-suite enabled                    : yes
       SA on AV-suite whitelist enabled    : no
       AV-check enabled                    : yes
       Dropper enabled                     : yes
       YARA enabled                        : yes
    
    Embedded object extraction enabled     : yes
    Embedded URL extraction enabled        : no
    ...

    The "Embedded URL extraction enabled:" line displays "no" if embedded URL analysis is disabled.