The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Creating email notice recipients using the CLI

Prev Next

Use the CLI commands in this procedure to create email notice recipients.

Prerequisites

  • An established connection between the Email Security - Server appliance and the Internet.

  • You are logged in to the Email Security - Server appliance CLI as an Admin or Operator.

To configure email notice recipients:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. Create the recipient.

    hostname (config) # email-analysis policy notice admin de@acme.com
    hostname (config) # email-analysis policy notice bcc fr@foo.com
  3. Verify that the feature is enabled.

    hostname (config) # show email-analysis policy
      Email-Analysis Policy:
        Analyze URLs in body:                 yes
        Analyze attachments:                  yes
        Analyze email using YARA:             no
        Email YARA Weight Cap:                30
        Max Email Size (MB):                  35
        Analysis Timeout (sec):               240
        Analyze image URLs:                   yes
        Advanced URL Defense:                 no
        Extract/Rewrite HTML URL as Text:     yes
        Max URLs Analyzed/email:              5
        Max Att. Analyzed/email:              20
        Congestion Bypass Mode:               yes
        Congestion Bypass Threshold:          19000
        Congestion Refuse-connnection Mode:   yes
        Congestion High Threshold:            29000
        Congestion Low Threshold:             26100
        Enable X Header:                      yes
        Use Header for To/From:               no
        Parse HTTPS URLs:                     no
        Invoke Email Feature Extractor:       yes
        Enable Notice (block mode):           yes
        Block notice from:                    admin@donotreply.com
        Block notice subject:                 Malicious email detected
        Block Admin Recipient(s):             de@acme.com
        Block BCC Recipient(s):               fr@foo.com
        TypoSquatting:		      	  yes
        Monitoring Enabled  :                 no
        Monitoring Interval (min):            15
        Monitoring Bypass Threshold:          1
        Monitoring Deferred Threshold:        100
        Monitoring Backoff (sec):             3600
        Text Attachment Analysis:             no
        Image Analysis:                       yes
    
  4. Save your changes.

    hostname (config) # write memory
    Saving configuration file ... Done!