Configuring the maximum file size for analysis using the CLI

Prev Next

Use the CLI commands in this topic to configure the maximum size of the file to be analyzed on the File Protect appliance. If the submitted file is larger than the configured maximum size, the File Protect appliance will not perform dynamic analysis or static analysis on the submitted malware sample. If the file is equal to or smaller than the configured maximum size but larger than the maximum size for dynamic analysis, the File Protect appliance will perform static analysis only. If the file and configured maximum size equal to the configured maximum size for dynamic analysis, the File Protect appliance will perform dynamic analysis and static analysis on submitted malware samples.

Prerequisites
  • Administrator or Operator access to the File Protect appliance.

To configure the maximum size of the file for analysis:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify the maximum size of the file.

    hostname (config) # analysis file max-size <MB>

    where <MB> is the maximum size of the file to be analyzed. The maximum size of the file can range from 1 MB to 10240 MB. By default, the maximum size of the file is 100 MB.

  3. Verify the configuration of the maximum size of the file.

    hostname (config) # show analysis config
    .....
    
    VM throttling                            : AUTO
    
    Riskware detection                       : Enabled
    Block Riskware                           : No
    
    Max overall file size                   : 100
    Max DA file size                         : 32

    The "Max overall file size:" line displays the maximum size of the file for analysis.

To configure the maximum size of the file for dynamic analysis:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify the maximum size of the file for dynamic analysis.

    hostname (config) # analysis file max-size da <MB>

    where <MB> is the maximum size of the file to be analyzed for dynamic analysis. The maximum size of the file for dynamic analysis can range from 1 MB to 100 MB. By default, the maximum size of the file for dynamic analysis is 32 MB.

  3. Verify the configuration of the maximum size of the file for dynamic analysis.

    hostname (config) # show analysis config
    .....
    
    VM throttling                            : AUTO
    
    Riskware detection                       : Enabled
    Block Riskware                           : No
    
    Max overall file size                    : 100
    Max DA file size                        : 32

    The "Max DA file size:" line displays the maximum size of the file for dynamic analysis.

To configure the maximum size of the file for DUA downloadable object:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Specify the maximum size of the file for DUA downloadable object.

    hostname (config) # analysis file max-size dua-file <MB>

    where <MB> is the maximum size of the file to be analyzed for dynamic analysis. The maximum size of the file for dynamic analysis can range from 1 MB to 10240 MB.

  3. Verify the configuration of the maximum size of the DUA downloadable object.

    hostname (config) # show analysis config
    .....
    
    VM throttling                            : AUTO
    
    Riskware detection                       : Enabled
    Block Riskware                           : No
    
    Max overall file size                    : 100
    Max DA file size                         : 32
    Max downloaded DUA file size (MB)       : 1024