file-reputation threat-level

Function

The file-reputation threat-level command configures the file threat level at which file reputation detection is triggered to block files or generate an alarm.

The undo file-reputation threat-level command restores the default file threat level.

Format

file-reputation threat-level { high-risk | middle-risk | low-risk }

undo file-reputation threat-level

Parameters

Parameter	Description	Value
high-risk	Indicates that the file threat level is high-risk or above.	-
middle-risk	Indicates that the file threat level is middle-risk or above.	-
low-risk	Indicates that the file threat level is low-risk or above.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, file reputation detection blocks files whose sandbox detection result is high-risk or above in the cache or generates an alarm for such files.

This command is a global configuration and takes effect on all APT defense profiles.

Example

# Configure file reputation detection to block files whose sandbox detection result is middle-risk or above in the cache or generate an alarm for such files.

<sysname> system-view
[sysname] file-reputation threat-level middle-risk