dlpcmd

Description

Control the Data Loss Prevention Engine on Security Gateway.

Syntax on a Security Gateway

dlpcmd [-s]

action_by_admin <options>

getquarantined

getquarantinedcount

getquarantinedsize

ramdisk <options>

Parameters

Parameter

Description

-s

Silent mode - does not print failure messages on the screen.

action_by_admin <options>

Sends or deletes the specified quarantined email by its public GUID from quarantine.

The available options are:

Send (Release) the specified quarantined email:

dlpcmd action_by_admin 1 {Public GUID of the Quarantined Email} ["Justification for Sending or Deleting"] ["Administrator Name"]

Delete (Discard) the specified quarantined email:

dlpcmd action_by_admin 2 {Public GUID of the Quarantined Email} ["Justification for Sending or Deleting"] ["Administrator Name"]

Notes:

You must enclose the email ID in curly brackets {}.
You can see this action in Audit Logs in SmartConsole. For example, see sk117753.

getquarantined

Shows the list of all quarantined emails.

getquarantinedcount

Shows the number of all quarantined emails.

getquarantinedsize

Shows the total size of all emails in quarantine.

ramdisk <options>

Shows and controls the DLP RAM Disk.

The available options are:

off - Disables the DLP RAM Disk
on - Enables the DLP RAM Disk
size <Size in MBytes> - Configures the size of the DLP RAM Disk
status - Shows the DLP RAM Disk information

Important - All operations except "status" require a restart of all services (cpstop and cpstart).

Example

[Expert@MyGW:0]# dlpcmd getquarantined
Printing quarantined mails:
Mail GUID: {8698E6EC-340C-9115-0AB6-F6CA9986147F}; Arrival date: Sun Dec  1 13:38:32 2019; exp date: Sun Dec  8 13:38:32 2019; sender: dataowner-JOHNDOE;
... ... ...
[Expert@MyGW:0]#
[Expert@MyGW:0]# dlpcmd action_by_admin 1 {8698E6EC-340C-9115-0AB6-F6CA9986147F} "Released an Email" "Main Admin"
[Expert@MyGW:0]#
[Expert@MyGW:0]# dlpcmd getquarantined
No quarantined mails
[Expert@MyGW:0]#