Disabling the python-based static analysis tool using the CLI

This procedure describes how to use CLI commands to disable the Python script-based analysis engine component of static analysis. The script-based analysis engine is enabled by default. You can disable and re-enable the script-based analysis engine by using CLI commands only.

Prerequisites

Operator or Admin access.
Static analysis is enabled on the Intelligent Virtual Execution - Server appliance. Check the "Static Analysis enabled" field in the output of the show static‑analysis config command.

To disable static analysis based on YARA rules and other file-type analysis techniques:

Go to CLI configuration mode.

vx-hostname > enable
vx-hostname # configure terminal

Disable the Python-based tool.

vx-hostname (config) # no static-analysis sa-python enable

Verify that the Python-based tool is disabled.

vx-hostname (config) # show static-analysis config
 
Static Analysis enabled                : yes
  AV-suite enabled                     : yes
  AV-suite version                     : 6
  SA on AV-suite whitelist enabled     : no
  AV-check enabled                     : yes
  Dropper enabled                      : yes
 YARA enabled                         : no
 
Embedded object extraction enabled     : no
Embedded URL extraction enabled        : yes
Max URLs from files to be analyzed     : 5
Static info policy                     : Disable

Yara Configuration
  Yara policy                          : both
  Yara customer match limit            : 5
  ........

Save your changes.
```
vx-hostname (config) # write memory
```