This procedure describes how to use CLI commands to disable the AV-suite integration component of static analysis. AV-suite is enabled by default. You can disable and re-enable AV-suite by using CLI commands only. When AV-suite is re‑enabled, no other configuration is required.
Note
AV-suite version 6 must be configured for AV-Suite to receive suspicious object hashes through the DTI network to determine whether the object hashes have been seen before.
Prerequisites
Admin or Operator access to the Central Management System appliance that manages the compute node.
To disable the AV‑suite integration component of static analysis:
Go to CLI configuration mode.
vx-hostname > enable vx-hostname # configure terminal
Disable AV‑suite integration.
vx-hostname (config) # no static-analysis av-suite enable
Verify that AV-suite integration is not enabled.
vx-hostname (config) # show static-analysis config Static Analysis enabled : yes AV-suite enabled : no AV-suite version : 6 SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : yes Embedded object extraction enabled : no Embedded URL extraction enabled : yes Max URLs from files to be analyzed : 5 Static info policy : Disable Yara Configuration Yara policy : both Yara customer match limit : 5 Yara customer default weight : 0 ........
Save your changes.
vx-hostname (config) # write memory