CLI Quick Reference Guide

This chapter contains the following sections:

Use the tables to locate the appropriate CLI command, a brief description and its availability on the C-, X, and M-series platforms.

CLI Commands (No Commit Required)

CLI Command

Description

Platform Availability

ampstatus

Display the version of various file reputation and analysis components.

C- and X- Series

antispamstatus

Display Anti-Spam status

C- and X- Series

antispamupdate

Manually update spam definitions

C- and X- Series

antivirusstatus

Display anti-virus status

C- and X- Series

antivirusupdate

Manually update virus definitions

C- and X- Series

archivemessage

Archives older messages in your queue.

C- and X- Series

bouncerecipients

Bounce messages from the queue

C-, X-, and M-Series

talosupdate

Request for an update of all Talos engine

C- Series

talosstatus

Display the current version of Talos Intelligence Services module

C- Series

clearchanges or clear

Clear changes

C-, X-, and M-Series

cloudserviceconfig

Configure the Cisco Threat Response server to connect your appliance to Cisco Threat Response.

C-, X-, and M-Series

commit

Commit changes

C-, X-, and M-Series

commitdetail

Display detailed information about the last commit

C- and X- Series

contentscannerstatus

Display content scanner version information.

C- and X- Series

contentscannerudpate

Request manual update of content scanner engine.

C- and X- Series

date

Display the current date and time

C-, X-, and M- Series

daneverify

Checks whether DANE is supported for a specified domain.

C- and X- Series

deleterecipients

Delete messages from the queue

C-, X-, and M-Series

delivernow

Reschedule messages for immediate delivery

C-, X-, and M-Series

diagnostic

Check RAID disks, network caches, and SMTP connections. Clear network caches.

C-, X-, and M-Series

dig

Look up a record on a DNS server

C- and X- Series

displayalerts

Display the last n alerts sent by the appliance

C-, X-, and M-Series

dlpstatus

Version information for DLP Engine

C- and X- Series

dlpupdate

Update DLP Engine

C- and X- Series

dnsflush

Clear all entries from the DNS cache

C-, X-, and M-Series

dnslisttest

Test a DNS lookup for a DNS-based list service

C- and X- Series

dnsstatus

Display DNS statistics

C-, X-, and M-Series

domainrepconfig

Create a Domain Exception List

C- and X-Series

ecstatus

Check the version of the enrollment client that is used to obtain certificates

C-Series

ecupdate

Update the enrollment client that is used to obtain certificates

C-Series

encryptionstatus

Shows the version of the PXE Engine and Domain Mappings file

C- and X-Series

encryptionupdate

Requests an update to the PXE Engine

C- and X-Series

enginestatus

Displays the status and CPU usage of all engines enabled on the appliance.

C- and X-Series

featurekey

Administer system feature keys

C-, X-, and M-Series

findevent

Find events in mail log files

C-, X-, and M-Series

geolocationupdate

Manually update the geolocation list.

C- and X-Series

geolocationstatus

Displays the current version of the geolocation list.

C- and X-Series

howtoupdate

Manually update the How-Tos component

C- and X-Series

howtostatus

Displays the current version of the How-Tos component

C- and X-Series

graymailstatus

Display the details of existing graymail rules

C- and X-Series

graymailupdate

Manually update graymail rules

C- and X-Series

grep

Search for text in a log file

C-, X-, and M-Series

healthcheck

Checks the health of your Email Security appliance

C- and X-Series

help or h or ?

Help

C-, X-, and M-Series

hostrate

Monitor activity for a particular host

C-, X-, and M-Series

hoststatus

Get the status of the given hostname

C-, X-, and M-Series

last

Display who has recently logged into the system

C-, X-, and M-Series

ldapflush

Flush any cached LDAP results

C- and X- Series

ldaptest

Perform a single LDAP query test

C- and X- Series

loadlicense

Load a virtual appliance license

All virtual appliances

mailconfig

Mail the current configuration to an email address

C-, X-, and M-Series

marstatus

Display the current version of the MAR component.

C- and X- Series

marupdate

Manually update the MAR component.

C- and X- Series

nslookup

Query a name server

C-, X-, and M-Series

netstat

Display network connections, routing tables, and network interface statistics.

C-, X-, and M-Series

outbreakflush

Clear the cached Outbreak Rules

C- and X- Series

outbreakstatus

Display current Outbreak Rules

C- and X- Series

outbreakupdate

Update Outbreak Filters rules

C- and X- Series

oldmessage

displays a list of old messages in the queue.

C- and X- Series

packetcapture

Intercept and display packets being transmitted or received over the network

C-, X-, and M-Series

passphrase or passwd

Change your passphrase

C-, X-, and M-Series

ping

Ping a network host

C-, X-, and M-Series

ping6

Ping a network host using IPV6

C-, X-, and M-Series

quit or q or exit

Quit

C-, X-, and M-Series

rate

Monitor message throughput

C-, X-, and M-Series

reboot

Restart the system

C-, X-, and M-Series

redirectrecipients

Redirect all messages to another relay host

C- and X- Series

removemessage

Removes old, undelivered messages from your queue.

C- and X- Series

repengstatus

Request version information of Reputation Engine

C-, X-, and M-Series

resetconfig

Restore the factory configuration defaults

C-, X-, and M-Series

resetcounters

Reset all of the counters in the system

C-, X-, and M-Series

resume

Resume receiving and deliveries

C-, X-, and M-Series

resumedel

Resume deliveries

C-, X-, and M-Series

resumelistener

Resume receiving

C-, X-, and M-Series

revert

Revert to a previous release

C-, X-, and M-Series

rollovernow

Roll over a log file

C-, X-, and M-Series

saveconfig

Saves the configuration to disk

C-, X-, and M-Series

sdrupdate

Manually update the SDR component

C- and X- Series

sdrdiagnostics

Checks if your Cisco Email Security Gateway is connected to the SDR service

C- and X- Series

settime

Manually set the system clock

C-, X-, and M-Series

showmessage

Displays old undelivered messages in your queue.

C- and X- Series

showconfig

Display all configuration values

C-, X-, and M-Series

showlicense

Display virtual appliance license information

All virtual appliances

show_license

Shows Smart Licensing status and summary of status.

C-, X-, and M-Series

showrecipients

Show messages from the queue by recipient host, Envelope From address, or all messages

C- and X- Series

shutdown

Shut down the system to power off

C-, X-, and M-Series

slblconfig

Configure Safelist/Blocklist settings

C- and X-Series

status

System status

C-, X-, and M-Series

supportrequest

Send a message to Cisco TAC

C-, X-, and M-Series

supportrequeststatus

Display Support Request Keywords version information

C-, X-, and M-Series

supportrequestupdate

Request manual update for Support Request Keywords

C-, X-, and M-Series

suspend

Suspend receiving and deliveries

C-, X-, and M-Series

suspenddel

Suspend deliveries

C-, X-, and M-Series

suspendlistener

Suspend receiving

C-, X-, and M-Series

systemsetup

First time system setup

C- and X- Series

tail

Continuously display the end of a log file

C-, X-, and M-Series

techsupport

Allow Cisco TAC to access your system

C-, X-, and M-Series

telnet

Connect to a remote host

C-, X-, and M-Series

threatfeedstatus

Display the current version of the ETF engine

C-, and X- Series

threatfeedupdate

Manually update the ETF engine

C-, and X-Series

tlsverify

Establish an outbound TLS connection to a remote host and debug any TLS connection issues

C- and X- Series

tophosts

Display the top hosts by queue size

C-, X-, and M-Series

topin

Display the top hosts by number of incoming connections

C-, X-, and M-Series

trace

Trace the flow of a message through the system

C-, X-, and M-Series

traceroute

Display the network route to a remote host

C-, X-, and M-Series

traceroute6

Display the network route to a remote host using IPV6.

C-, X-, and M- Series

trailblazerconfig

Routes your incoming and outgoing connections through HTTP and HTTPS ports on the new web interface of the appliance.

C-, X-, and M- Series

tzupdate

Update timezone rules

C-, X-, and M-Series

updatenow

Update all components

C-, X-, and M-Series

upgrade

Install an upgrade

C-, X-, and M-Series

version

View system version information

C-, X-, and M-Series

wipedata

Wipe the core files on the disk and check the status of the last coredump operation

C-, X-, and M-Series

websecuritydiagnostics

View diagnostic statistics for URL filtering

C-, X-, and M- Series

who

List who is logged in

C-, X-, and M-Series

whoami

Display your current user id

C-, X-, and M-Series

workqueue

Display and/or alter work queue pause status

C- and X- Series

CLI Commands (Commit Required)

CLI Command

Description

Platform Availability

addressconfig

Configure From: addresses for system generated mail

C-, X-, and M- Series

addresslistconfig

Configure address lists

C- and X- Series

adminaccessconfig

Configure network access list and banner login

C- and X- Series

aggregatorconfig

Configure address of the Cisco Aggregator Server

C- and X- Series

alertconfig

Configure email alerts

C-, X-, and M- Series

aliasconfig

Configure email aliases

C- and X- Series

altsrchost

Configure Virtual Gatewayâ„¢ mappings

C- and X- Series

ampconfig

Configure Advanced Malware Protection (File reputation and analysis)

C-, X-, and M- Series

antispamconfig

Configure Anti-Spam policy

C- and X- Series

antivirusconfig

Configure anti-virus policy

C- and X- Series

bounceconfig

Configure the behavior of bounces

C-, X-, and M- Series

bvconfig

Configure key settings for outgoing mail, and configure how to handle invalid bounces.

C- and X- Series

callaheadconfig

Add, edit, and remove SMTP Call-Ahead profiles

C-, X-, and M- Series

certconfig

Configure security certificates and keys

C-, X-, and M- Series

clusterconfig

Configure cluster related settings

C- and X- Series

deliveryconfig

Configure mail delivery

C- and X- Series

destconfig

Configure options for the Destination Controls Table.

C- and X- Series

dictionaryconfig

Configure content dictionaries

C-, X-, and M- Series

diskquotaconfig

Configure disk space

C-, X-, and M- Series

dmarcconfig

Configure DMARC settings

C- and X- Series

dnsconfig

Configure DNS setup

C- and X- Series

dnshostprefs

Configure IPv4/IPv6 DNS preferences

C-, X-, and M- Series

dnslistconfig

Configure DNS List services support

C- and X- Series

domainkeysconfig

Configure DomainKeys support

C- and X- Series

ecconfig

Configure the enrollment client that is used to obtain certificates

C-, X-, and M- Series

encryptionconfig

Configure email encryption

C- and X- Series

etherconfig

Configure Ethernet settings

C-, X-, and M- Series

exceptionconfig

Configure domain exception table

C- and X- Series

featurekeyconfig

Automatically check and update feature keys

C-, X-, and M-Series

filters

Configure message processing options

C- and X- Series

generalconfig

Configure browser settings and other general settings

C-, X-, and M- Series

healthconfig

Configure the threshold of various health parameters of your appliance

C-, X-, and M- Series

imageanalysisconfig

Configure the IronPort Image Analysis settings

C-, X-, and M- Series

imsandgraymailconfig

Configure Cisco Intelligent Multi-Scan (IMS) and graymail detection and safe unsubscribe settings.

C-, X-, and M- Series

incomingrelayconfig

Configure Incoming Relays

C- and X- Series

interfaceconfig

Configure Ethernet IP addresses

C-, X-, and M- Series

ldapconfig

Configure LDAP servers

C- and X- Series

license_smart

Configure smart software licensing feature.

C-, X-, and M- Series

listenerconfig

Configure mail listeners

C- and X- Series

loadconfig

Load a configuration file

C-, X-, and M- Series

localeconfig

Configure multi-lingual settings

C- and X- Series

logconfig

Configure access to log files

C-, X-, and M- Series

ntpconfig

Configure NTP time server

C-, X-, and M- Series

outbreakconfig

Configure Outbreak Filters

C- and X- Series

policyconfig

Configure per recipient or sender based policies

C- and X- Series

portalregistrationconfig

Set Spam Submission Tracking Portal registration ID for your appliance.

C- and X- Series

quarantineconfig

Configure system quarantines

C- and X- Series

reportingconfig

Configure reporting settings

C-, X-, and M- Series

rollbackconfig

Rollback to one of the previously committed configurations

C-, X-, and M- Series

routeconfig

Configure IP routing table

C-, X-, and M- Series

safeprint

Configure safe print settings on your email gateway.

C-, X-, and M- Series

samlconfig

Configure SAML profiles with the service and indentity provider settings

C-, X-, and M- Series

scanconfig

Configure attachment scanning policy

C- and X- Series

sdrconfig

Enable and Configure SDR filtering on your Cisco Email Security Gateway

C- and X- Series

sdradvancedconfig

Configure advanced parameters when connecting your Cisco Email Security Gateway to the SDR service

C- and X- Series

servicelogsconfig

Enable or disable Service Logs on the appliance.

C-Series

setgateway

Set the default gateway (router)

C-, X-, and M- Series

sethostname

Set the name of the machine

C-, X-, and M- Series

settz

Set the local time zone

C-, X-, and M- Series

sievechar

Configure characters for Sieve Email Filtering, as described in RFC 3598

C- and X- Series

smimeconfig

Configure S/MIME functionality

C-, X-, and M- Series

smtpauthconfig

Configure SMTP Auto profiles

C- and X- Series

smtproutes

Set up permanent domain redirections

C-, X-, and M- Series

snmpconfig

Configure SNMP

C-, X-, and M- Series

sshconfig

Configure SSH keys

C-, X-, and M- Series

sslconfig

Configure SSL settings

C-, X-, and M- Series

sslv3config

Enable/Disable SSLv3

C-, X-, and M- Series

stripheaders

Set message headers to remove

C- and X- Series

tcpservices

Display information about files opened by processes

C-, X-, and M- Series

textconfig

Configure text resources

C- and X- Series

threatfeedconfig

Enable and Configure ETF engine on your Cisco Email Security Gateway

C-, and X- Series

threatresponseconfig

Enable and disable Cisco Threat Response on your appliance.

C-, and X- Series

trackingconfig

Configure the tracking system

C-, X-, and M- Series

unsubscribe

Update the global unsubscribe list

C-, X-, and M- Series

updateconfig

Configure system update parameters

C- and X- Series

LDAP

Configure system upgrade parameters (deprecated command)

urllistconfig

Configure whitelists of safe URLs.

C-, X-, and M- Series

userconfig

Manage user accounts and connections to external authentication sources.

C-, X-, and M- Series

websecurityadvancedconfig

Configure advanced settings for URL filtering

C-, X-, and M- Series

websecurityconfig

Configure global settings for URL filtering

C-, X-, and M- Series