Sets the amount of time between submissions of URLs and files that the system will evaluate whether a second submission is a duplicate malicious or non-malicous artifact. For example, if the timeout is set to 3 hours. If a duplicate file is received 2.5 hours after a the first file is received, the file will be marked as a duplicate and not analyzed.
Syntax
analysis duplicate {malicious | nonmalicious} {url | file} timeout <hours>
Parameters
malicious
Sets the interval for detecting malicious URLs or files as duplicate.
url
Specifies to look for duplicate URLs.
file
Specifies to look for duplicate files.
<hours>
The number of hours after a URL or file is received that the system will look for duplicates of the URL or file. If you set the time interval to 0, no duplication checks are performed.
Example
The following example will set the time interval for detecting duplicate malicious files to 8 hours.
hostname (config) # analysis duplicate malicious file timeout 8
The following example will turn off duplicate detection for malicious files.
hostname (config) # analysis duplicate malicious file timeout 0
User role
Admin
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Email Security — Server: Release 7.9
Network Security: Release 8.0
Intelligent Virtual Execution - Server: Release 8.0