Views:

To fix the issue, implement the BCC deployment mode using McAfee Email Gateway (MEG) as the upstream MTA. Do the following:

  1. Log in to the DDEI web console.
  2. Go to Administration > System Settings.

    System Settings

  3. In the Operation Mode section, select BCC Mode.

    Enable BCC Mode

  4. Click Save.

  1. Log in to the MEG web console.

  2. Go to Email > Email Policies, and then click Add Policy.

    Email Policies

  3. Create a rule and select the policy conditions based on your demand. It is recommended to use your domain name to match this rule.

     
    You may use an existing policy for your domain because MEG allows you to set an antivirus, antispam, and content filter under one policy.

  4. Click Policy based actions under the DDEI rule, then do the following:

    • Uncheck Use the same setting as <rule_name> .
    • Under If an email matches this policy, select Allow Through (Monitor).

    • Under Notification email options, tick the following:

      • Send one or more notification emails.
      • Deliver an audit copy to ‘Auditing Email List’.
     
    It is recommended to enable the antivirus rule in this policy. In case an email contains a known virus and was detected by MEG, it will not send a BCC to DDEI. This also make sense because DDEI is used to detect unknown threats.

    Policy Based Action Settings

  5. Click Notifications and Routing, then do the following:

    • Uncheck Use the same setting as <rule_name>.

    • Add the BCC address. To do this, do the following:

      1. Click the Email Recipients tab.
      2. Choose the Edit button for Auditing Email list. The Edit Recipient List window opens.
      3. Click Add, and then add the BCC Address in.
     
    It is recommended to use a virtual domain for DDEI. If you use admin@yourdomain.com and the upstream MTA does not support smart host with priority, the BCC email might be forwarded to the downstream MTA/MDA directly. Here, donnie_shi@ddeicncorelab.com is just an example.

    Notification and Routing Settings

    Edit Recipient List

  6. Click Apply.

    Click Apply

  7. Go to MEG Web Console > Email > Email Configuration > Sending Email, and then add one relay entry.

  8. On the Add Relay list window, provide the following:

    • Domain name for the BCC Address in the Domain Name box.
    • IP Address of DDEI in the Relay Host box.

    Add Relay List

  9. Choose OK.
  10. Click Apply for the changes to take effect.
  11. Send an email to verify if DDEI receives the BCC. If it did not work, contact Trend Micro Technical Support.
Keywords: deploy ddei, bcc mode, MEG,Ddei deployment,deploy in bcc mode,blind carbon copy mode,mcafee email gateway