Use the CLI commands in this procedure to enable or disable the advanced X-header feature.
This feature is required to customize the riskware X-header feature. For details, see Customizing riskware X-header block text using the CLI and Customizing riskware X-header match text using the CLI.
To enable the advanced X-header:
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Enable the advanced X-header.
hostname (config) # email-analysis policy xheader advanced-xheader enable
Verify the status of the advanced X-header.
hostname (config) # show email-analysis policy Email-Analysis Policy: Analyze URLs in body: yes Analyze attachments: yes Analyze email using YARA: no Email YARA Weight Cap: 30 Max Email Size (MB): 35 Analysis Timeout (sec): 240 Analyze image URLs: yes Advanced URL Defense: xhdr Extract/Rewrite HTML URL as Text: yes Max URLs Analyzed/email: 5 Max Att. Analyzed/email: 20 Congestion Bypass Mode: yes Congestion Bypass Threshold: 2000 Congestion Bypass Unprocessed Limit: 0 Congestion Refuse-connnection Mode: yes Congestion High Threshold: 10000 Congestion Low Threshold: 9000 Enable X Header: yes (Adv. X-header) Use Header for To/From: yes Parse HTTPS URLs: yes Invoke Email Feature Extractor: no Enable Notice (tap mode): no Enable Notice (block mode): yes .....
Save your changes.
hostname (config) # write memory
To disable the advanced X-header:
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Disable the advanced X-header.
hostname (config) # no email-analysis policy xheader advanced-xheader enable
Verify the status of the advanced X-header.
hostname (config) # show email-analysis policy Email-Analysis Policy: Analyze URLs in body: yes Analyze attachments: yes Analyze email using YARA: no Email YARA Weight Cap: 30 Max Email Size (MB): 35 Analysis Timeout (sec): 240 Analyze image URLs: yes Advanced URL Defense: xhdr Extract/Rewrite HTML URL as Text: yes Max URLs Analyzed/email: 5 Max Att. Analyzed/email: 20 Congestion Bypass Mode: yes Congestion Bypass Threshold: 2000 Congestion Bypass Unprocessed Limit: 0 Congestion Refuse-connnection Mode: yes Congestion High Threshold: 10000 Congestion Low Threshold: 9000 Enable X Header: yes Use Header for To/From: no Parse HTTPS URLs: no Invoke Email Feature Extractor: no Enable Notice (tap mode): no Enable Notice (block mode): yes .....
Save your changes.
hostname (config) # write memory