Creating email notice recipients using the CLI

Prev Next

Use the CLI commands in this procedure to create email notice recipients.

Prerequisites

  • An established connection between the Email Security - Server appliance and the Internet.

  • You are logged in to the Email Security - Server appliance CLI as an Admin or Operator.

To configure email notice recipients:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Create the recipient.

    hostname (config) # email-analysis policy notice admin de@acme.com
    hostname (config) # email-analysis policy notice bcc fr@foo.com
  3. Verify that the feature is enabled.

    hostname (config) # show email-analysis policy
      Email-Analysis Policy:
        Analyze URLs in body:                 yes
        Analyze attachments:                  yes
        Analyze email using YARA:             no
        Email YARA Weight Cap:                30
        Max Email Size (MB):                  35
        Analysis Timeout (sec):               240
        Analyze image URLs:                   yes
        Advanced URL Defense:                 no
        Extract/Rewrite HTML URL as Text:     yes
        Max URLs Analyzed/email:              5
        Max Att. Analyzed/email:              20
        Congestion Bypass Mode:               yes
        Congestion Bypass Threshold:          19000
        Congestion Refuse-connnection Mode:   yes
        Congestion High Threshold:            29000
        Congestion Low Threshold:             26100
        Enable X Header:                      yes
        Use Header for To/From:               no
        Parse HTTPS URLs:                     no
        Invoke Email Feature Extractor:       yes
        Enable Notice (block mode):           yes
        Block notice from:                    admin@donotreply.com
        Block notice subject:                 Malicious email detected
        Block Admin Recipient(s):             de@acme.com
        Block BCC Recipient(s):               fr@foo.com
        TypoSquatting:		      	  yes
        Monitoring Enabled  :                 no
        Monitoring Interval (min):            15
        Monitoring Bypass Threshold:          1
        Monitoring Deferred Threshold:        100
        Monitoring Backoff (sec):             3600
        Text Attachment Analysis:             no
        Image Analysis:                       yes
    
  4. Save your changes.

    hostname (config) # write memory
    Saving configuration file ... Done!