Configuring remediation for Exchange On-prem users using the CLI

Use the CLI commands to configure Exchange On-prem remediation.

Before configuring the remediation feature for Microsoft Exchange, ensure the following requirements are met:

Full Mailbox Access: You must identify or create a dedicated service account within your Exchange environment. The service account must be granted FullAccess permissions to all user mailboxes within the organization that require remediation coverage.
Ensure EWS is enabled for the service account.

To enable remediation for Exchange On-prem users:

Go to CLI configuration mode:

hostname > enable
hostname # configure terminal

Enable the remediation.

hostname (config) # email-analysis remediation enable

Configure the server of Exchange (On-prem).

hostname (config) # email-analysis remediation exchange config server <server IP>

Configure the username and password of Exchange server.

hostname (config) # email-analysis remediation exchange config username <username> password <password>

Set the mode to Exchange or Cloud.

hostname (config) # email-analysis remediation mode exchange
hostname (config) # email-analysis remediation mode cloud

Configure an automatic remediation policy for retroactively detected malicious email.
```
hostname (config) # email-analysis remediation policy {pull | quarantine }
```
- quarantine—Blocks retroactive malicious email.
- pull—Deletes retroactive malicious email.
Perform the submission and add this submission for manual remediation.
```
hostname (config) # email-analysis remediation queue-id <queue-id> 
```
Save your changes.
```
hostname (config) # write memory
```

Verify the configuration for Exchange remediation.

hostname (config) # show email-analysis remediation