The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Import the Malware Policies

Prev Next

This URL imports the malware policies.

Resource URL

POST /domain/<domain_id>/malwarepolicy/import

Content-type value

multipart/form-data; boundary=<x>

Request Parameters

URL Parameters:

Field Name

Description

Data Type

Mandatory

domain_id

Domain id

Number

Yes

Payload Request Parameters:

Field Name

Description

Data Type

Mandatory

MultiPart

Holds the body part objects

Object

Yes

Details of BodyPart[0]:

Field Name

Description

Data Type

Mandatory

BodyPart[0]

Holds the import file element object

Application/json object

Yes

Details of ImportFileElement:

Field Name

Description

Data Type

Mandatory

fileName

Name of the file

String

Yes

fileType

File type should be "XML"

String

Yes

skipDuplicate

Whether the duplicate policies should be skipped(default is true)

Boolean

No

Details of BodyPart[1]:

Field Name

Description

Data Type

Mandatory

BodyPart[1]

Holds the file as input stream

Application/octet-stream

Yes

Details of .xml file:

Field Name

Description

Data Type

Mandatory

File

Policy(file input stream)

ByteArrayInput stream

Yes

Response Parameters

Following fields are returned if the request parameters are correct, otherwise error details are returned.

Field Name

Description

Data Type

status

Set to 1 if the operation was successful

Number

message

Message returned from the backend

String

Example

Request

POST https://<NSM_IP>/sdkapi/domain/0/malwarepolicy/import

Payload

----Boundary_1_12424925_1353496814940
Content-Type: application/json

{
 	"fileType": "xml",
     	"skipDuplicate": false,
     	"fileName": "MalwarePolicies0"
}



----Boundary_1_12424925_1353496814940
Content-Type: application/octet-stream

<?xml version='1.0' encoding='ISO-8859-1'?>
<MalwarePolicyConfig>
 <MalwarePolicyExport EMSVersion="8.0.5.9.108">
  <MalwarePolicy>
   <MalwarePolicyVO name="TestMalwarePolicy_1" owner="0" visibleToChild="yes" isEditable="yes" desc="VisibletoChildDomain"/>
  </MalwarePolicy>
  <MalwarePolicy>
   <MalwarePolicyVO name="TestMalwarePolicy_2" owner="0" visibleToChild="no" isEditable="yes" desc="NotVisible tochildDomain"/>
  </MalwarePolicy>
  <MalwarePolicy>
   <MalwarePolicyVO name="malware archive" owner="0" visibleToChild="yes" isEditable="yes" desc="">
    <MalwarePolicyProtocol idnum="16" enabled="yes"/>
    <MalwarePolicyProtocol idnum="12" enabled="yes"/>
   </MalwarePolicyVO>
   <MalwarePolicyFileActions groupId="1" engineStatus="19" alertingConfidence="5" blockingConfidence="5" sendTcpConfidence="5" quaratineConfidence="0" saveFileConfidence="1" blacklistConfidence="0" fileSize="0"/>
   <MalwarePolicyFileActions groupId="2" engineStatus="18" alertingConfidence="5" blockingConfidence="5" sendTcpConfidence="5" quaratineConfidence="0" saveFileConfidence="1" blacklistConfidence="0" fileSize="0"/>
   <MalwarePolicyFileActions groupId="3" engineStatus="27" alertingConfidence="5" blockingConfidence="5" sendTcpConfidence="5" quaratineConfidence="0" saveFileConfidence="1" blacklistConfidence="0" fileSize="0"/>
   <MalwarePolicyFileActions groupId="4" engineStatus="18" alertingConfidence="5" blockingConfidence="5" sendTcpConfidence="5" quaratineConfidence="0" saveFileConfidence="1" blacklistConfidence="0" fileSize="0"/>
   <MalwarePolicyFileActions groupId="5" engineStatus="3" alertingConfidence="5" blockingConfidence="5" sendTcpConfidence="5" quaratineConfidence="0" saveFileConfidence="1" blacklistConfidence="0" fileSize="0"/>
   <MalwarePolicyFileActions groupId="6" engineStatus="18" alertingConfidence="5" blockingConfidence="5" sendTcpConfidence="5" quaratineConfidence="0" saveFileConfidence="1" blacklistConfidence="0" fileSize="0"/>
  </MalwarePolicy>
 </MalwarePolicyExport>
</MalwarePolicyConfig>

----Boundary_1_12424925_1353496814940--

Response

{
"status": 1,
"message": ",,Importing Malware Policy: malware archive,Importing Malware Policy: TestMalwarePolicy_2,Importing Malware Policy: TestMalwarePolicy_1, "
}

Error Information

Following error codes are returned by this URL:

No

HTTP Error Code

SDK API errorId

SDK API errorMessage

1

404

1105

Invalid domain

2

400

5301

Invalid file type given for import

3

500

5307

Policy import failed.. Please look into the logs..

4

500

2202

Input stream read error