The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Editing impersonation detection rules using the CLI

Prev Next

Use the CLI commands in this topic to edit impersonation detection rules.

Prerequisites

  • An established connection between the Email Security - Server appliance and the Internet.

  • You are logged in to the Web UI with Admin and Operator access.

To edit an impersonation rule:
  1. Go to CLI configuration mode.

    hostname > enable
    hostname # configure terminal
  2. View the impersonation rule list to see the rule ID for the rule you want to edit.

    hostname (config) # show email-analysis impersonation all
  3. Edit by specifying the impersonation rule ID followed by replacement names and email addresses.

    • To replace a rule with a single name and email address:

      hostname (config) # email-analysis impersonation edit <rule-id> <name> <email-address>
    • To replace a rule with multiple names and email addresses:

      hostname (config) # email-analysis impersonation edit <rule-id> <name1[,name2,…]> <email-address1[,email-address2,…]>
  4. Verify the changes.

    hostname (config) # show email-analysis impersonation <rule-id>
  5. Save the changes to the current active configuration.

    hostname (config) # write memory