analysis custom whitelist regex url

Prev Next

Adds a rule to a custom whitelist based on the RegEx URL.

A whitelist allows you to control which messages that contain an attachment can be bypassed based on the matched known rule entries. No further analysis is performed. The appliance will not analyze an attachment within an email message for malicious content if it contains the regex URL that you defined and added to the appliance database.

You can add up to 10,000 whitelist entries to the appliance database.

Syntax

[no] analysis custom whitelist regex url <URL>

Parameters

no

Use the no form of this command to delete a rule from a custom whitelist based on the RegEx URL.

<URL>

The specific RegEx URL that is added as a whitelist rule.

Example

The following example adds the URL "/\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_\+.~#?&amp;//=]*)" to a custom RegEx whitelist:

hostname (config) # analysis custom whitelist regex url /\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_\+.~#?&//=]*)

The following example deletes the URL "/\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_\+.~#?&amp;//=]*)" from a custom RegExwhitelist:

hostname (config) # no analysis custom whitelist regex url /\/(www\.)?[-a-zA-Z0-9@:%._\+~#=]{1,256}\.[a-zA-Z0-9()]{1,6}\b([-a-zA-Z0-9()@:%_\+.~#?&//=]*)

User role

Admin or Operator

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later:

  • Malware Analysis: Release 11.0.0

  • Email Security — Server: Release 11.0.0

  • Network Security: Release 11.0.0