FilePolicyConfiguration

Description

An object that represents the File and Malware Inspection Performance and Storage Options (Note: The field level constraints listed here might not cover all the constraints on the field. Additional constraints might exist.)

Supported Operations

Model Properties

Property Required Type Description
version False string A unique string version assigned by the system when the object is created or modified. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete an existing object. As the version will change every time the object is modified, the value provided in this identifier must match exactly what is present in the system or the request will be rejected.
name False string Name of the object
bytesToBeInspected False integer An integer, 0-4294967295 (4 GB), default is 1460, that indicates the number of bytes the system should inspect when performing file type detection. Specify 0 to allow the system to inspect as many bytes as needed to determine the file type. To detect ISO files, enter a value greater than 36870
Field level constraints: must be between 0 and 4294967295 (inclusive). (Note: Additional constraints might exist)
allowFileTimeout False integer An integer, 0-30, default is 2 seconds, Specifies how long the system will hold the last byte of a file that matches a Block Malware rule and that does not have a cached disposition, while malware cloud lookup occurs. If the time elapses without the system obtaining a disposition, the file passes. Dispositions of Unavailable are not cached. Do not set this option to 0 without contacting Support.
Cisco recommends that you use the default value to avoid blocking traffic because of connection failures
Field level constraints: must be between 0 and 30 (inclusive). (Note: Additional constraints might exist)
disableSha256ForLargerFiles False integer An integer, 0-4294967295 (4 GB), default is 10485760 bytes, that indicates maximum file size in bytes that a file can have for following operations: Prevents the system from storing files larger than a given size, performing a malware cloud lookup on the files, or blocking the files if added to the custom detection list. Value 0 removes the restriction
Field level constraints: must be between 0 and 4294967295 (inclusive). (Note: Additional constraints might exist)
minFileSizeAdvancedFileInspection False integer An integer,0-10485760 ,default is 6144 bytes (6KB), that specifies the minimum file size, in bytes that the system should inspect using the following detectors:
Spero analysis
Sandboxing and preclassification
Local malware analysis/ClamAV
Archive inspection

And also specifies the min file size that the system can store using a file rule.
0 disables file storage.
Additional Constraints: Must be less than or equal to maxFileSizeAdvancedFileInspection and disableSha256ForLargerFiles values (in bytes)
Field level constraints: must be between 0 and 10485760 (inclusive). (Note: Additional constraints might exist)
maxFileSizeAdvancedFileInspection False integer An integer,0-10485760 ,default is 1048576 bytes (1MB), that specifies the maximum file size, in bytes,that the system should inspect using the following detectors:
Spero analysis
Sandboxing and preclassification
Local malware analysis/ClamAV
Archive inspection

And also specifies the max file size that the system can store using a file rule.
0 disables file storage.
Additional Constraints: Must be greater than or equal to minFileSizeAdvancedFileInspection, and less than or equal to disableSha256ForLargerFiles for files larger than (in bytes)
Field level constraints: must be between 0 and 10485760 (inclusive). (Note: Additional constraints might exist)
systemDefined False boolean A Boolean value, TRUE or FALSE (the default). The TRUE value indicates that this object is a system defined object
id False string A unique string identifier assigned by the system when the object is created. No assumption can be made on the format or content of this identifier. The identifier must be provided whenever attempting to modify/delete (or reference) an existing object.
Field level constraints: must match pattern ^((?!;).)*$. (Note: Additional constraints might exist)
type True string A UTF8 string, all letters lower-case, that represents the class-type. This corresponds to the class name.