Enabling or Disabling Retroactive Detection From AV-Suite

When you enable retroactive detection from AV-Suite, the Malware Analysis appliance queries the AV-Suite server for previous retroactive verdicts based on the submitted malware samples. When retroactive detection from AV-Suite is disabled, the Malware Analysis appliance does not query the AV-Suite server for previous retroactive verdicts based on submitted samples.

NOTE: Retroactive detection from AV-Suite is enabled by default.

Prerequisites

  • Administrator or Operator access to the Malware Analysis appliance
  • A two-way sharing CONTENT_UPDATES license
  • Verify that AV-Suite integration is enabled and that AV-suite version 6 is configured. Use the show static-analysis config command.