Configures EMA files. This command is available on the Malware Analysis appliance.
Use the no form of this command to remove a configuration
Syntax
[no] malware file analysis_tmoseconds
[no] malware file guestosguestos_namefile-typefile_type defaultapplication_name
[no] malware file guestosguestos_namerepository path {badpath | goodpath | srcpath}
[no] malware file repository poll intervalminutes
[no] malware file repository shared-point auth {enable | userusernamepasswordpassword}
malware file repository shared-point urlshared_url
Parameters
analysis_tmoseconds
Sets the EMA file analysis timeout in seconds.
guestos
Configures the guest operating system for EMA files.
guestos_name
Specifies the guest operating system; for example: winxp-sp2, winxp-sp3, win7-base, win7-sp1, or winxp-base.
file_type
Specifies the file name extension; for example: exe, com, doc, ppt, jpg, qt, pdf, or zip.
application_name
Specifies the application name; for example: InternetExplorer, Firefox, RealPlayer, Windows-Media-Player, Adobe-Reader, MS-Word, MS-Excel, MS-PowerPoint, QuickTime-Player, or Windows-Explorer.
repository path
Configures guest operating system repository paths (bad, good, or source) for EMA files.
path
Specifies the directory path relative to the share point.
repository
Configures the file repository for EMA files.
poll
Configures the EMA file repository poll rate by specifying an interval in minutes.
shared-point
Configures the EMA file repository access point.
auth
Enables authentication for the shared-point, with the option to require a username and password.
url
Configures the network share specified in URL format.
shared_url
Specifies the network share in the format: cifs://serverIP/sharename. The IP address of the server must be used instead of the server name.
Example
The following example configures an EMA file guest operating system.
hostname (config) # malware file guestos win7-sp1 file-type exe default InternetExplorer-9.0
User role
Admin
Command mode
Config