All commands


arp	Display the kernel ARP table for the selected module.
cancel backup schedule	Cancel all scheduled backups.
cancel download hotfix	Cancel a hotfix download in progress.
cancel download upgrade	Cancel an upgrade download.
clear session	End a config mode session immediately.
config	Enter config mode.
create backup now	Create an appliance backup now.
create backup schedule	Define a schedule for automatic backups.
create user	Create a user account.
delete account email	Delete the password recovery email address.
delete account smtp	Delete SMTP settings.
delete backup	Delete backup files stored locally on the appliance.
delete certificate	Delete a certificate on the appliance.
delete component_route	Delete routing between components.
delete filestore	Delete one or more filestore aliases.
delete hotfix	Remove a hotfix file from the appliance.
delete interface dhcpv4	Delete DHCP interface settings.
delete interface dns	Delete appliance DNS settings.
delete interface ipv4	Delete interface IPv4 settings.
delete interface ipv6	Delete appliance IPv6 settings.
delete interface vlan	Delete appliance VLAN settings.
delete internet_proxy	Delete the Internet proxy configuration.
delete route	Delete a single IPv4 static route.
delete route6	Delete a single IPv6 static route.
delete user	Delete a user account.
diagnose	Enter the appliance CLI diagnose mode.
email-shell_debug_mode	Run selected debug modes on this appliance.
ethtool	Display the current Ethernet card settings.
exit	Exit the current CLI mode.
get email log_list	Run the DIG command.
get email log	Retrieve the specified log file.
get email log_list	Retrieve files that can be downloaded to a filestore.
get email pem	Download the PEM files to a filestore.
ifconfig	Display the status of the active network interfaces.
install hotfix	Install a hotfix file on the appliance.
install upgrade	Install an upgrade file on the appliance.
load certificate	Load a certificate from the filestore to the appliance.
load hotfix	Load the hotfix to the appliance.
load route	Add or delete IPv4 static route definitions.
load route6	Add or delete IPv6 static route definitions.
load trap	Load SNMP trap events configuration from a file.
load upgrade	Download or upload an upgrade file.
login analytics-engine	Log on to the DLP analytics-engine module CLI.
login email	Log onto the email module.
migrate interactive / migrate silent	Move the configuration and email datastore to a new appliance.
nc	Read and write data to the specified server.
netstat	Print network connections routing tables, interface statistics, and so on.
nslookup	Obtain DNS information for the specified host.
pause download hotfix	Pause a hotfix download in progress.
pause download upgrade	Pause an upgrade download in progress.
ping/ping6	Use ping and ping6 to test connectivity with the specified hostname or IP address.
register	Re-register the appliance.
restart	Restart the appliance, Web module, Content Gateway, and so on.
restart appliance	Restart the appliance.
restart email	Restart Forcepoint Email Security services.
restart policy-engine	Restart Policy Engine services.
restore backup	Restore the appliance configuration settings saved in the specified backup file.
resume download hotfix	Resume a hotfix download.
resume download upgrade	Resume an upgrade download.
route/route6	Display the contents of the selected module's kernel IP routing table entries in numeric format.
save backup	Save local backup file to a remote filestore.
save configsummary	Summarize configuration data and save it to a specified location.
save log	Zip a specified log file and save to a remote filestore.
save mibfile	Save the appliance MIB file to a specified location.
save route	Export IPv4 static routes to a remote storage location.
save route6	Export IPv6 static routes to a remote storage location.
save trap	Save SNMP trap events for editing or later use.
send test_email	Send a test email using the email/SMTP configuration.
set access ssh	Enable or disable remote CLI access via SSH.
set account admin	Change the password for the admin account.
set account audit	Enable or disable the audit account, and set or change the audit account password.
set account email	Define an email address to use for admin account password recovery.
set account smtp	Display the SMTP server settings used with the admin email address to facilitate password recovery.
set account tech-support	Enable or disable access for Forcepoint Technical Support.
set component_route	Configure traffic between components for routing through the appliance.
set debugging	Display the module's logging level status.
set decrypt_port_mirror	Configure the decryption port mirror (DPM).
set diagnostic_ports	Set the status of diagnostic ports for use by Forcepoint Technical Support for remote troubleshooting.
set domain-group	Define a new domain group or add a domain to an existing domain group.
set email subscription_reset	Reset the email subscription.
set email-x-header	Enable or disable the Email Security x-header creation function.
set filestore	Define a remote location to host backup and configuration files.
set header-variables	Set header variables in filter actions.
set interface bond	Bond the interfaces.
set interface dhcpv4	Configure DHCP interface settings.
set interface dns	Configure appliance DNS settings.
set interface ipv4	Configure appliance interface in IPv4 settings.
set interface ipv6	Configure appliance interface in IPv6 settings.
set interface state	Set the state of the specified interface.
set interface unbond	Remove interface bonding.
set interface vlan	Configure appliance VLAN settings.
set internet_proxy	Configure the proxy the appliance will use to contact Forcepoint servers for hotfixes/upgrades.
set log archive	Configure how and when log files are archived.
set logging	Configure the specified log file maximum archive size.
set mode filter	Set the policy mode to filtering only.
set mode full	Set the policy mode to full (also known as full policy source).
set mode user	Set the policy mode to user directory and filtering (sometimes referred to as policy lite).
set mta accept-email-traffic-as	Configure Email Security to handle email traffic
set mta open-relay-trusted-ip	Configure whether to allow or reject all open relay messages.
set mta reject-empty-pass-auth	Configure whether to reject login requests with empty passwords as authentication failure.
set mta sender-domain-validation	Configure whether to reject messages if the sender domain has no MX/A/AAAA record in DNS.
set mta tls-auth-only	Enable or disable 250-AUTH from the Email Security response to the EHLO command.
set mta tls-incoming	Configure the incoming TLS.
set mta tls-outgoing	Configure the outgoing TLS.
set mta tls-received-header	Configure whether to log the TLS version and cipher information in the Received header.
set mta treat-blank-sender-as-outbound	Enable or disable scanning messages using the Outbound policy.
set mta trusted-ip-bypass-blocklist	Configure whether to drop messages from Trusted IP groups.
set network-agent	Enable or disable the Network Agent module.
set openssl-fips	Enable or disable FIPS mode.
set pem-load-balancer	Enable or disable the load balancer for Personal Email Manager and Forcepoint Secure Messaging.
set port	Open or close the specific port and each interface.
set proxy content_line	Run the Content Gateway content line command.
get email log_list	Run a network check against the Content Gateway.
set proxy policy_engine	Stop, start, or restart the Content Gateway Policy Engine.
set proxy password	Reset the proxy password.
set route	Add a static route in IPv4 format.
set route6	Add a static route in IPv46 format.
set security	Set the current ciphers and protocols used for the specified type.
set service	Stop, start, or restart Forcepoint Email Security services.
set snmp service	Enable or disable SNMP monitoring (polling).
set snmp v1	Configure SNMP v1 monitoring.
set snmp v2c	Configure SNMP v2c monitoring.
set snmp v3	Configure SNMP v3 monitoring.
set sysctl	Modify Linux kernel parameters at runtime.
set system clock	Set system time and date manually.
set system host	Change the hostname and description for the appliance.
set system ntp	Configure time zone synchronization with up to three NTP servers.
set system timezone	Set the time zone for this appliance.
set trap service	Enable or disable SNMP traps.
set trap v1	Configure SNMP v1 traps for alerting.
set trap v2c	Configure SNMP v2c traps for alerting.
set trap v3	Configure SNMP v3 traps for alerting.
set user	Update user account settings.
set vswitch stp	Set the virtual switch STP bridge priority value.
set web cache_users	Retrieve the status or enable/disable the caching of users.
set web control	Enable or disable the specified Web protection service.
get email log_list	Retrieve information from the Policy Broker.
set web usr_grp_ip_prec	Retrieve the status or enable/disable the User Group IP Precedence.
setvirtualip	Set the virtual IP address for the Email module.
show access ssh	Display whether remote CLI access via SSH is enabled or disabled.
show account audit	Determine whether the audit account is enabled or disabled.
show account email	Display the admin account email address.
show account smtp	Display the SMTP server settings used with the admin email address to facilitate password recovery.
show account tech-support	Display Forcepoint Technical Support account access or activity history.
show analytic-update info	Display Forcepoint analytics database names and current database update information.
show appliance info	Display hardware and software data.
show appliance status	Display status information for the Analytics Engine and Policy Engine.
show backup list	Display all available backups in a specified location.
show backup schedule	Display the configured backup schedule.
show bandwidth	Display network traffic statistics, refreshed every five seconds.
show certificate	List the user certificate.
show component_route	Display the list of configured component routes.
show cpu	Display current CPU usage, refreshed every four seconds.
show current user	Show the user currently logged on.
show decrypt_port_mirror	Display the decryption port mirror configuration.
show diagnostic_ports	Display the status of diagnostic ports for use by Technical Support for troubleshooting.
show diskio	Display disk activity for the present modules, refreshed every four seconds.
show diskspace	Display disk statistics for all partitions.
show download hotfix	Display the status of the hotfix download process.
show download upgrade	Display the upgrade download status.
show email	Display status information for the Email module.
show email counter	Display Forcepoint Email Security counters.
show email info	Display Email Security container and build information.
show email subscription	Display Forcepoint Email Security subscription information.
show filestore	Display all filestore aliases.
show hotfix history	Display information about applied hotfixes.
show hotfix list	Display a list of available appliance hotfixes.
show interface bond	Display the bonded interface.
show interface dhcp	Display the current DHCP network configuration.
show interface info	Display the current network interface information.
show internet_proxy	Display the current Internet proxy information.
show log archive	Display log file archiving settings.
show log lastline	Display the last n lines of the log file (limit 500).
show log realtime	Display data as it is appended to the log file.
show manager info	Display Forcepoint DLP Analytics Engine configuration information.
show mem	Display system memory usage.
set network-agent	Display status information for the Network Agent module.
show port	Display the status of the specified port on a virtual interface.
show proxy	Display status information for the Content Gateway module.
show route	Display the list of configured static IPv4 routes.
show route6	Display the list of configured static IPv6 routes.
show security	View the current ciphers and protocols used for the specified type.
show service status	Display Forcepoint Email Security services along with service operational status and uptime.
show session	Display connection information for active CLI sessions.
show snmp config	Display SNMP monitor server information.
show sysctl	Display Linux kernel parameters.
show system clock	View the system date and time.
show system host	View the appliance hostname and description.
show system ntp	View the configured NTP servers.
show system timezone	View the configured time zone.
show system timezone-list	View supported time zone formats.
show trap config	Display SNMP trap server on/off status and version information.
show trap events	Display a table of SNMP trap events and settings.
show upgrade history	Display the upgrades that have been installed on this appliance.
show upgrade list	Display a list of upgrades available on Forcepoint servers.
show upgrade status	Display status of upgrade package download and installation.
show user	Show user information for all logged-on users or for a specific user.
show vswitch priority	Display the virtual switch STP bridge priority setting.
show vswitch status	Display the virtual switch STP bridge status.
show web	Display status information for the Web module.
shutdown appliance	Shut down the appliance.
start	Start Web module, Content Gateway services, or Network Agent, and so on.
start email	Start Forcepoint Email Security services.
start policy-engine	Start Policy Engine services.
stop	Stop Web module, Content Gateway services, or Network Agent, and so on.
stop email	Stop Forcepoint Email Security services.
stop analytics-engine	Stop Forcepoint DLP Analytics Engine services.
stop policy-engine	Stop Policy Engine services.
sync system ntp	Synchronize the time with the NTP servers.
tcpdump	Display information about packets from the specified network interface.
test tcp port	Test whether the TCP port is open for connection.
test trap event	Send a test trap to verify SNMP communication.
top	Display all Linux processes that are currently running in the selected module.
traceroute/traceroute6	Display the route used by packets to reach the specified destination.
uninstall hotfix	Uninstall a hotfix from the appliance.
wget	Test connectivity with the specified URL.
wget-proxy	Test connectivity between the specified URL and the proxy.