Technical References

3-47
CLI Reference Guide for AsyncOS 9.7 for Cisco Email Security Appliances
Chapter 3 The Commands: Reference Examples
DMARC Verification
DMARC Verification
This section contains the following CLI commands:
• dmarcconfig
dmarcconfig
Description
Configure DMARC settings.
Usage
Commit: This command requires a ‘commit’.
Cluster Management: This command can be used in all three machine modes (cluster, group, machine).
Batch Command: This command supports a batch format.
Batch Format - DMARC Verification Profiles
The batch format of the dmarcconfig can be used to create, edit, or delete verification profiles and
modify global settings.
Add a DMARC Verification Profile
dmarcconfig profiles new <name> [options]
Argument Description
<name>
Name of the DMARC profile.
[options]
--rejectpolicy_action
The message action that AsyncOS must take when the policy in
DMARC record is reject. Possible values are “reject”,
“quarantine”, or “none.”
--rejectpolicy_response_code
The SMTP response code for rejected messages. The default
value is 550.
--rejectpolicy_response_text
The SMTP response text for rejected messages. The default
value is “#5.7.1 DMARC unauthenticated mail is prohibited.”
--rejectpolicy_quarantine
The quarantine for messages that fail DMARC verification.
--quarantinepolicy_action
The message action that AsyncOS must take when the policy in
DMARC record is quarantine. Possible values are “quarantine”
or “none.”
--quarantinepolicy_quarantine
The quarantine for messages that fail DMARC verification.
--tempfail_action
The message action that AsyncOS must take on the messages
that result in temporary failure during DMARC verification.
Possible values are “accept” or “reject.”