Configuring the malware repository network share using the CLI

The following topics explain how to manage the malware repository network share using the CLI:

Prerequisites

Configuring the network share settings

Use the malware file repository shared-point url command to configure the access point for the network share. Use the malware file repository shared-point auth command to configure the user credentials to access the network share.

After you have configured the network share settings, you must log in to the Web UI to verify the network share status that is displayed on the Malware Repository Configuration page. For instructions, see Configuring malware repository network share using the Web UI.

Note

The network share status cannot be verified using the CLI.

Configuring the repositories for each guest image

Use the malware file guestos command to configure the malware repository paths for each guest image. The Input (src), Output (Good), and Output (Bad) paths are relative to the share point. You must use the same path for all guest image files in the input and output directories. Each operating system for each guest image have different names. The Malware Analysis appliance will move files to the Output (Good) path that are determined to be nonmalicious if no malware is detected. The Malware Analysis appliance will move files to the Output (Bad) path that are determined to be malicious if malicious characteristics are detected.

The following example configures the repositories for the Input (src) paths for each guest image:

hostname (config)# malware file guestos winxp-sp2m repository path src sp2/src
hostname (config)# malware file guestos winxp-sp3m repository path src sp3/src
hostname (config)# malware file guestos win7-sp1m repository path src w7/src
hostname (config)# malware file guestos win7x64-sp1m repository path src w7-64-sp1/src
hostname (config)# malware file guestos osx-10.8.2 repository path src 10.8.2/src
hostname (config)# malware file guestos osx-10.9 repository path src 10.9/src

The following example configures the repositories for the Output (Good) paths for each guest image:

hostname (config)# malware file guestos winxp-sp2m repository path good sp2/good
hostname (config)# malware file guestos winxp-sp3m repository path good sp3/good
hostname (config)# malware file guestos win7-sp1m repository path good w7-sp1/good
hostname (config)# malware file guestos win7x64-sp1m repository path good w7-64-sp1/good
hostname (config)# malware file guestos osx-10.8.2 repository path good 10.8.2/good
hostname (config)# malware file guestos osx-10.9 repository path good 10.9/good

The following example configures the repositories for the Output (Bad) paths for each guest image:

hostname (config)# malware file guestos winxp-sp2m repository path bad sp2/bad
hostname (config)# malware file guestos winxp-sp3m repository path bad sp3/bad
hostname (config)# malware file guestos win7-sp1m repository path bad w7-sp1/bad
hostname (config)# malware file guestos win7x64-sp1m repository path bad w7-64-sp1/bad
hostname (config)# malware file guestos osx-10.8.2 repository path bad 10.8.2/bad
hostname (config)# malware file guestos osx-10.9 repository path bad 10.9/bad

Configuring the polling period for the repositories

Use the malware file repository poll command to configure the poll rate for the repositories. The Malware Analysis appliance polls the repositories at regular intervals to analyze potential malware and sort it into malicious and nonmalicious directories.

Viewing the configuration for the repositories

Use the show malware file repositories command to view the results of the configuration for the network share settings and profile repositories.