Deleting rules from an allowed list using the CLI

Use the CLI commands in this topic to delete rules from an allowed list using the CLI.

Important
Use the no analysis custom whitelist signature-id command to delete the allowed list (whitelist) rule based on the signature ID. For details about how to delete a custom whitelist rule, see Adding or deleting a custom whitelist rule using the CLI.

To delete a rule from an allowed list:

Go to CLI configuration mode.

hostname > enable
hostname # configure terminal

Specify the type of rule to delete from an allowed list.

To delete the allow policy rule based on the email address of the sender:

hostname (config) # no email-analysis allowed-list sender-email-address <email_address>

To delete the allow policy rule based on the domain of the sender

hostname (config) # no email-analysis allowed-list sender-domain <domain_name>

To delete the allow policy rule based on the IP address of the sender:

hostname (config) # no email-analysis allowed-list sender-ip <IP_address>

To delete the allow policy rule based on the email address of the recipient:

hostname (config) # no email-analysis allowed-list recipient-email-address <email_address>

To delete the allow policy rule based on the URL:

hostname (config) # no email-analysis allowed-list url <URL>

To delete the allow policy rule based on the MD5 checksum attachment:

hostname (config) # no email-analysis allowed-list md5sum <MD5_checksum_attachment>

Save your changes.
```
hostname (config) # write memory
```

Examples

This example deletes the email address of the sender from an allowed list:

hostname (config) # no email-analysis allowed-list sender-email-address abc@benign\.com

This example deletes the domain of the sender from an allowed list:

hostname (config) # no email-analysis allowed-list sender-domain somedomain\.net

This example deletes the IP address of the sender from an allowed list:

hostname (config) # no email-analysis allowed-list sender-ip 11\.22\.33\.44

This example deletes the email address of the recipient from an allowed list:

hostname (config) # no email-analysis allowed-list recipient-email-address somebody@fireeye\.com

This example deletes the URL from an allowed list:

hostname (config) # no email-analysis allowed-list url http://www.redu.com

This example deletes the MD5 checksum attachment from an allowed list:

hostname (config) # no email-analysis allowed-list md5sum d41d8cd98f00b204e9800998ecf8427e