imap-detect (APT defense profile view)

Function

The imap-detect command enables file reputation detection for IMAP.

The undo imap-detect command disables file reputation detection for IMAP.

imap-detect direction { both | download | upload } [ action { alert | declare | delete-attachment } ]

undo imap-detect [ direction ] [ action ]

Parameter	Description	Value
direction	Specifies the transmission direction of the files.	The direction can be one of the following (the default direction is both): both: Indicates that files in the upload and download directions are inspected. download: Indicates that files in the download direction are inspected. upload: Indicates that files in the upload direction are inspected.
action	Specifies the response action.	The response action can be either of the following (the default action is alert): alert: The system permits files and generates logs. declare: The system permits files, add declarations to the email bodies, and generates logs. delete-attachment: The system deletes the email attachments, add declarations to the email bodies, and generates logs.

APT defense profile view

2: Configuration level

By default, file reputation detection is enabled for IMAP.

# Create a profile named apt_imap and set the file inspection direction to upload and action to declare.

<sysname> system-view
[sysname] profile type aapt name apt_imap
[sysname-profile-aapt-apt_imap] imap-detect direction upload action declare