Use the CLI commands in this procedure to add or delete riskware detection custom policy rules on the File Protect appliance.
Note
You can add as many file extensions as you want.
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Add a particular policy rule file extension.
hostname (config) # analysis custom riskware file-extension <extension>
Verify the status of a custom policy rule for riskware detection for blocking or alert.
hostname (config) # show analysis custom riskware file-extension
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Locate the policy rule ID you want to disable.
hostname (config) # show analysis custom riskware file-extensionDisable a particular policy rule ID.
hostname (config) # no analysis custom riskware file-extension <rule_ID>
Verify the status of a custom policy rule for riskware detection.
hostname (config) # show analysis custom riskware file-extension
Examples
This example enables a custom policy rule ID for riskware detection.
hostname (config) # analysis custom riskware file-extension exe
This example disables a custom policy rule ID for riskware detection.
hostname (config) # no analysis custom riskware file-extension 13
This example shows the current custom policy rule configuration for riskware detection.
hostname (config) # show analysis custom riskware file-extension
Policy Type: riskware
Id: : 13
UUID: : 3f23234c-1476-410e-a70f-e5e160e97857
Rule Type: : extension
Source: : Custom
Extension: : exe
Signature: : Custom.Extension.Alert.exe
Id: : 12
UUID: : c29f7057-3c33-45e8-ac36-6423a2d7652d
Rule Type: : extension
Source: : Custom
Extension: : tt
Signature: : Custom.Extension.Alert.tt
Id: : 11
UUID: : 02a61a22-7b09-467b-ae4f-7cb98926f8b7
Rule Type: : extension
Source: : Custom
Extension: : ss
Signature: : Custom.Extension.Alert.ss