When you enable retroactive detection from AV-Suite, the Email Security - Server appliance queries the AV-Suite server for previous retroactive verdicts based on the submitted malware samples. When retroactive detection from AV-Suite is disabled, the Email Security - Server appliance does not query the AV-Suite server for previous retroactive verdicts based on submitted samples.
Note
Retroactive detection from AV-Suite is enabled by default.
Prerequisites
Administrator or Operator access to the Email Security - Server appliance
A two-way sharing CONTENT_UPDATES license
Verify that AV-Suite integration is enabled and that AV-suite version 6 is configured. Use the
show static-analysis configcommand.