Adds a rule to a custom whitelist based on the md5sum hash file.
A whitelist allows you to control which messages that contain an attachment can be bypassed based on the matched known rule entries. No further analysis is performed. The appliance will not analyze an attachment within an email message for malicious content if it contains the md5sum hash file that you defined and added to the appliance database.
You can add up to 10,000 whitelist entries to the appliance database.
Syntax
[no] analysis custom whitelist md5sum <md5sum>
Parameters
no
Use the no form of this command to delete the whitelist rule based on the md5sum hash file.
Example
The following example adds the md5sum hash file "2ff34afe77d5dd3b92c4d9c6bc1003870580e2d7a51ace181c0fc6fac62bd881" to the whitelist:
hostname (config) # analysis custom whitelist md5sum 2ff34afe77d5dd3b92c4d9c6bc1003870580e2d7a51ace181c0fc6fac62bd881
The following example deletes the md5sum hash file "2ff34afe77d5dd3b92c4d9c6bc1003870580e2d7a51ace181c0fc6fac62bd881" from the whitelist:
hostname (config) # no analysis custom whitelist md5sum 2ff34afe77d5dd3b92c4d9c6bc1003870580e2d7a51ace181c0fc6fac62bd881
User role
Admin or Operator
Command mode
Config
Supported Appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Release 11.0.0
File Protect: Release 11.0.0
Network Security: Release 11.0.0