This procedure describes how to use CLI commands to re-enable the AV-check component of static analysis. AV-check is enabled by default. You can disable and re-enable AV-check by using CLI commands only. When AV-check is enabled, no other configuration is required.
Prerequisites
Operator or Admin access.
Static analysis is enabled on the compute node. Check the "Static Analysis enabled" field in the output of the
show static‑analysis configcommand.(Optional) A TrellixAV_ENGINE_SOPHOS license, which enables AV‑check to automatically block the sites categorized by Trellix as malicious.
To enable the AV-check component of static analysis:
Go to CLI configuration mode.
vx-hostname > enable vx-hostname # configure terminal
Enable AV-check.
vx-hostname (config) # static-analysis av-check enable
Verify that AV-check is enabled.
vx-hostname (config) # show static-analysis config
Static Analysis enabled : yes AV-suite enabled : yes AV-suite version : 6 SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : yes YARA enabled : yes Embedded object extraction enabled : no Embedded URL extraction enabled : yes Max URLs from files to be analyzed : 5 Static info policy : Disable Yara Configuration Yara policy : both Yara customer match limit : 5 ........
Save your changes.
vx-hostname (config) # write memory