How did you find those messages are sent from command line tool? Perhaps you create a filter which will test the message for a specific data and then you choose the action you would like to apply.
For instance, you know messages from this command line tool add a specific header,
. You then create a filter which will test messages for this header and you quarantine/drop those.
To answer you directly, Cisco ESA AsyncOS has no built in mechanism to detect command line emails.
You will need to tell the system something it can use to match command line messages.
You are welcome to fill a feature request tough. Please refer to:
Sent from Cisco Technical Support iPad App
