Uploading YARA rules to managed appliances using the Web UI

Important

YARA rules are not supported on a Network Security or File Protect sensor or sensor-enabled Network Security integrated appliance.

Use the Appliance Settings: YARA Rules page to upload YARA rules for malware analysis to managed Network Security appliances running Release 7.7.0 or later, managed Email Security — Server appliances running release 7.9.0 or later, managed Intelligent Virtual Execution - Server appliances, and managed File Protect appliances running Release 8.0.0 or later.

To upload YARA rules:

Click Settings and then select Appliance Settings.
Click YARA Rules in the sidebar.
(Optional) Use the controls at the top of the page to define the scope of the changes.
Important
If the scope includes appliances that are not running the minimum supported release, a message informs you that the changes were not applied to those appliances.
Configure and upload YARA rules as described in the Network Security User Guide, the Email Security — Server User Guide, Intelligent Virtual Execution - Server Administration Guide, or File Protect User Guide.