Adding rules to an allowed list using the CLI

Use the CLI commands in this topic to add rules to an allowed list using the CLI.

Important
Use the analysis custom whitelist signature-id command to add the allowed list (whitelist) rule based on the signature ID. For details about how to add a custom whitelist rule, see Adding or deleting a custom whitelist rule using the CLI.

To add rules to an allowed list:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the type of rule to add to an allowed list.

To add the allow policy rule based on the email address of the sender:

hostname (config) # email-analysis allowed-list sender-email-address <email_address>

To add the allow policy rule based on the domain of the sender:

hostname (config) # email-analysis allowed-list sender-domain <domain_name>

To add the allow policy rule based on the IP address of the sender:

hostname (config) # email-analysis allowed-list sender-ip <IP_address>

To add the allow policy rule based on the email address of the recipient:

hostname (config) # email-analysis allowed-list recipient-email-address <email_address>

To add the allow policy rule based on the URL:

hostname (config) # email-analysis allowed-list url <URL>

To add the allow policy rule based on the MD5 checksum attachment:

hostname (config) # email-analysis allowed-list md5sum <MD5_checksum_attachment>

Save your changes.
```
hostname (config) # write memory
```

Examples

This example adds the email address of the sender to an allowed list:

hostname (config) # email-analysis allowed-list sender-email-address abc@benign\.com

This example adds the domain of the sender to an allowed list:

hostname (config) # email-analysis allowed-list sender-domain somedomain\.net

This example adds the IP address of the sender to an allowed list:

hostname (config) # email-analysis allowed-list sender-ip 11\.22\.33\.44

This example adds the email address of the recipient to an allowed list:

hostname (config) # email-analysis allowed-list recipient-email-address somebody@fireeye\.com

This example adds the URL to an allowed list:

hostname (config) # email-analysis allowed-list url http://www.redu.com

This example adds the MD5 checksum attachment to an allowed list:

hostname (config) # email-analysis allowed-list md5sum d41d8cd98f00b204e9800998ecf8427e