Enabling the analysis mode using the CLI

Use the commands in this section to enable the analysis mode for your Email Security — Server appliance.

To enable the analysis mode:

Enable the CLI configuration mode:

hostname > enable
hostname # configure terminal

Enable the analysis mode.
- For Block mode:
  1. Enable Block mode:
    hostname (config) # email-analysis mode block
  2. (Optional) Notify the intended recipients that malicious emails were blocked and not delivered to them:
    hostname (config) # email-analysis policy notice enable
    Note
    To customize the notification text, see Configuring Notices Using the CLI .
  3. (Optional) To retroactively notify the recipient that a malicious email was missed, but then later blocked and not delivered:
    hostname (config) # email-analysis policy notice retro enable
- For Drop mode:
  1. Enable Drop mode:
    hostname (config) # email-analysis mode drop
  2. (Optional) Show the original email To: and From: header envelope information in the eAlerts and eQuarantine pages in the Email Security — Server Web UI:
    hostname (config) # email-analysis policy use-header enable
    Note
    See the Email Security — Server User Guide for details about this feature.
- For Monitor mode:
```
hostname (config) # email-analysis mode monitor
```
- For Tap/Span mode:
```
hostname (config) # email-analysis mode tap
```
Save your changes:
```
hostname (config) # write memory
```
Reboot the appliance:
```
hostname (config) # reload
```

Examples

This example changes the analysis mode to Drop and enables header envelope support.

hostname (config) # email-analysis mode drop
hostname (config) # email-analysis policy use-header enable
hostname (config) # show email-analysis
Email-Analysis:
  enabled:                  yes
  mode:                     drop
  interface:                pether3
  .
  .
  Email-Analysis Policy:
    .
    .
    Use Header for To/From:    yes
    .
    .

This example changes the analysis mode to Tap/Span.

hostname (config) # email-analysis mode tap
You must reload the appliance for the analysis mode change to take effect.
hostname (config) # show email-analysis 
Email-Analysis:
  enabled:                  yes
  mode:                     tap
  interface:                pether3
  .
  .

hostname (config) # reload