pop3-detect (APT defense profile view)

Function

The pop3-detect command enables file reputation detection for POP3.

The undo pop3-detect command disables file reputation detection for POP3.

pop3-detect [ action { alert | declare | delete-attachment } ]

undo pop3-detect [ action ]

Parameter	Description	Value
action	Specifies the response action.	The response action can be either of the following (the default action is alert): alert: The system permits files and generates logs. declare: The system permits files, add declarations to the email bodies, and generates logs. delete-attachment: The system deletes the email attachments, add declarations to the email bodies, and generates logs.

APT defense profile view

2: Configuration level

By default, file reputation detection is enabled for POP3.

POP3 supports file reputation detection only in the download direction.

# Create a profile named apt_pop3 and set the action for POP3 to declare.

<sysname> system-view
[sysname] profile type aapt name apt_pop3
[sysname-profile-aapt-apt_pop3] pop3-detect action declare