Use the CLI commands in this procedure to configure email notices.
Note
You can only use message variables once when configuring an email notice.
Prerequisites
An established connection between the Email Security - Server appliance and the Internet.
You are logged in to the Email Security - Server appliance CLI as an Admin or Operator.
To configure email notices:
Go to CLI configuration mode.
hostname > enable hostname # configure terminal
Configure the email notice.
hostname (config) # email-analysis policy notice enable hostname (config) # email-analysis policy notice retro enable hostname (config) # email-analysis policy notice from admin@donotreply.com hostname (config) # email-analysis policy notice bcc alias3@acme.com hostname (config) # email-analysis policy notice admin de@acme.com hostname (config) # email-analysis policy notice subject Malicious email hostname (config) # email-analysis policy notice body emails
Verify that the feature is enabled.
hostname (config) # show email-analysis policy Email-Analysis Policy: Analyze URLs in body: yes Analyze attachments: yes Analyze email using YARA: yes Email YARA Weight Cap: 30 Max Email Size (MB): 35 Analysis Timeout (sec): 60 Analyze image URLs: no Rewrite escape: all Advanced URL Defense: yes Extract/Rewrite HTML URL as Text: no Max URLs Analyzed/email: 5 Max Att. Analyzed/email: 20 Congestion Bypass Mode: yes Congestion Bypass Threshold: 2000 Congestion Refuse-connection Limit: 0 Congestion Refuse-connnection Mode: yes Congestion High Threshold: 10000 Congestion Low Threshold: 9000 Congestion High Threshold Bounced: 20000 Congestion Low Threshold Bounced: 18000 Enable X Header: no Use Header for To/From: no Invoke Email Feature Extractor: yes Enable Notice (tap mode): no Enable Notice (block mode): yes Enable Retro Notice: yes Block notice from: admin@donotreply.com Block notice subject: [Warning]A Malicious Email was Blocked Block Admin Recipient(s): Block BCC Recipient(s): TypoSquatting: yes Monitoring Enabled : no Monitoring Interval (min): 15 Monitoring Bypass Threshold: 1 Monitoring Deferred Threshold: 100 Monitoring Backoff (sec): 3600 Text Attachment Analysis: no Image Analysis: no
Save your changes.
hostname (config) # write memory Saving configuration file ... Done!