Configuring the transport layer security modes using the CLI

Use the CLI commands in this procedure to configure the transport layer security receiving mode and default delivery mode for the MTA interface.

To configure transport layer security modes:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the type of receiving mode.

To set the TLS receiving mode to none, enter:

hostname (config) #  email-analysis tls receive none

To set the TLS receiving mode to opportunistic, enter:

hostname (config) #  email-analysis tls receive opportunistic

To set the TLS receiving mode to mandatory, enter:

hostname (config) #  email-analysis tls receive mandatory

Specify the type of default delivery mode.
- To set the TLS default delivery mode to none, enter:
  hostname (config) # email-analysis tls delivery none
- To set the TLS default delivery mode to opportunistic, enter:
```
hostname (config) #  email-analysis tls delivery opportunistic
```
- To set the TLS default delivery mode to mandatory, enter:
```
hostname (config) #  email-analysis tls delivery mandatory
```
- To set the TLS default delivery mode to verify, enter:
```
hostname (config) #  email-analysis tls delivery verify
```

Verify the options that are configured for TLS.

hostname (config) # show email-analysis
Email-Analysis:
  enabled:                   yes
  mode:                      monitor
  interface:                 pether3
  TLS receive mode:          none
  TLS default deliv. mode:   none
  MTA certificate name:      system-self-signed
  Password-protected objs:   yes
  cipher list:               compatible
  minimum protocol version:  tls1
  .
  .
  .

The "TLS receive mode" line displays the receiving mode configuration. The "TLS default deliv. mode" line displays the default delivery mode configuration.

Save your changes.
hostname (config) # write memory