You should enable the policy to extract and rewrite HTML as text when your email clients are set to render text only. When this policy is enabled, the URL extraction, matching, and rewriting ignores HTML semantics. You can enable or disable this policy using the CLI only.
Note
URLs are rewritten only if Advanced URL Defense and rewriting are enabled.
Advanced URL Defense automatically rewrites all URLs that were extracted, including URLs in anchor text. Enabling the policy to extract and rewrite HTML as text may cause more URLs or slightly different URLs to be extracted from the HTML and passed to Advanced URL Defense processing.
Note
Extracted URLs are compared against custom whitelists and blacklists and other rules such as YARA rules. The extraction using this policy may match slightly differently.
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Enable extracting and rewriting HTML as text.
hostname (config) # email-analysis policy htmlastext enable
Save your changes.
hostname (config) # write memory
Verify that extracting and rewriting HTML as text is enabled.
hostname (config) # show email-analysis policy Email-Analysis Policy: Analyze URLs in body: yes Analyze attachments: yes Analyze email using YARA: no Email YARA Weight Cap: 30 Max Email Size (MB): 35 Analysis Timeout (sec): 240 Analyze image URLs: yes Advanced URL Defense: yes Extract/Rewrite HTML URL as Text: yes Max URLs Analyzed/email: 5 [ . . . ]
Go to CLI configuration mode:
hostname > enable hostname # configure terminal
Disable extracting and rewriting HTML as text.
hostname (config) # no email-analysis policy htmlastext enable
Save your changes.
hostname (config) # write memory
Verify that extracting and rewriting HTML as text is disabled.
hostname (config) # show email-analysis policy Email-Analysis Policy: Analyze URLs in body: yes Analyze attachments: yes Analyze email using YARA: no Email YARA Weight Cap: 30 Max Email Size (MB): 35 Analysis Timeout (sec): 240 Analyze image URLs: yes Advanced URL Defense: yes Extract/Rewrite HTML URL as Text: no Max URLs Analyzed/email: 5 [ . . . ]