This procedure describes how to use CLI commands to disable the malware intrinsic analysis component of static analysis. Malware intrinsic analysis is enabled by default. You can disable and re-enable intrinsic analysis by using CLI commands only. When intrinsic analysis is re-enabled, no other configuration is required.
Prerequisites
Operator or Admin access
To disable the intrinsic analysis component of static analysis:
Go to CLI configuration mode.
vx-hostname > enable vx-hostname # configure terminal
Disable malware intrinsic analysis.
vx-hostname (config) # no static-analysis malware-intrinsic-analysis enable
Verify that malware intrinsic analysis is not enabled.
vx-hostname (config) # show static-analysis config Static Analysis enabled : yes AV-suite enabled : yes AV-check enabled : yes Dropper enabled : no YARA enabled : yes Malware Intrinsic Analysis enabled : no (DTI) Embedded object extraction enabled : no Static info policy : Disable Yara Configuration Yara policy : both Yara customer match limit : 5 Yara customer default weight : 0 Malware Whitelist Past Hours : 24 Malware Blacklist Past Hours : 4 Analysis reset duplicate since : 2016/07/07 22:46:16 Mobile Threat Prevention : yes
Save your changes.
vx-hostname (config) # write memory