Enabling or disabling email YARA analysis using the CLI

Prev Next

Use the commands in this procedure to enable email YARA analysis.

Note

The email YARA analysis feature is enabled by default.

Prerequisites

  • An established connection between the Email Security - Server appliance and the Internet.

  • You are logged in to the CLI as an Admin or Operator access.

To enable or disable email YARA analysis:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Enable or disable email YARA analysis.

    To enable email YARA analysis:

    hostname (config) # email-analysis policy yara-analysis enable

    To disable email YARA analysis:

    hostname (config) # no email-analysis policy yara-analysis enable

  3. Verify your changes.

    In the following example, the "Analyze email using YARA:" line of the command output displays "yes" to show that the feature is enabled.

    hostname (config) # show email-analysis policy
    Email-Analysis Policy:
      Analyze URLs in body:      yes
      Analyze attachments:          yes
      Analyze email using YARA:     yes
      Email YARA Weight Cap:        30
      Max Email Size (MB):          35
      Analysis Timeout (sec):       240
      Analyze image URLs:           yes
      Advanced URL Defense:         no
      .
     .
     .
  4. Save your changes.

    hostname (config) # write memory
    Saving configuration file ... Done!