Views:

Email Encryption

With Email Encryption, Deep Discovery Email Inspector encrypts messages using Trend Micro Identity-Based Encryption (IBE) to protect confidential and private information in outgoing email messages.

Data collected
  • Email sender
  • Email recipient
Console locationAdministration > Integrated Products/Services > Email Encryption
Console settings
  • Click Add to register a domain.
  • To disable this feature, delete all entries from the Domain List.

Email Encryption

Back to top

Web Reputation

Deep Discovery Email Inspector scans URLs in email messages (subject, body, and attachment) and queries the risk rating and category.

Disabling Web Reputation prevents the transmission of data to Trend Micro but severely affects the ability of Deep Discovery Email Inspector to detect malicious URLs.

Data collectedURL
Console locationAdministration > Scanning/Analysis > URL Scanning
Console settings

Disable URL Scanning

Web Reputation

Back to top

Web Inspection Service (WIS)

Deep Discovery Email Inspector scans URLs in email messages (subject, body, and attachment) and queries the threat names for malicious URLs.

Disabling Web Inspection Service prevents Deep Discovery Email Inspector from querying and displaying the threat names for malicious URLs on the management console.

Data collectedURL
Console locationAdministration > Scanning/Analysis > URL Scanning
Console settings

Disable URL Scanning

WIS

Back to top

Time-of-Click Protection

Deep Discovery Email Inspector scans URLs in email message body and blocks access to malicious URLs or redirects users to a warning page when a URL is clicked.

Disabling this feature prevents Deep Discovery Email Inspector from scanning URLs at the time of user clicks.

Data collectedURL
Console locationAdministrator > Scanning/Analysis > Time-of-Click Protection
Console settings

Enable Time-of-Click Protection

Time-of-Click

Back to top

Predictive Machine Learning

Disabling this feature prevents the Predictive Machine Learning module from scanning executable and script files for unknown threats, and may result in increased process loading in Virtual Analyzer.

Data collected
  • File name
  • File path
Console locationRDQA > Scan Settings > Predictive Machine Learning
Console settings

Enable Predictive Machine Learning before processing by Virtual Analyzer

PML

Back to top

Smart Feedback for Predictive Machine Learning

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • File name
  • File content
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Predictive Machine Learning

Back to top

Smart Feedback for Script Analyzer Engine

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • URL
  • Redirected URL
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Script Analyzer Engine

Back to top

Smart Feedback for Antispam Engine

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • Email recipient
  • Email sender
  • Email subject
  • IP address
  • URL
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Antispam Engine

Back to top

Smart Feedback for Virtual Analyzer

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • File name
  • File content
  • Network connection (IP address and port number)
  • URL
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Virtual Analyzer

Back to top

Email Reputation Services (ERS)

Deep Discovery Email Inspector leverages Trend Micro Email Reputation Services to verify IP addresses of incoming email messages using Trend Micro’s reputation database to identify new spam and phishing sources.

Disabling this feature prevents the sending of data to Trend Micro, but will severely affects the ability of Deep Discovery Email Inspector to effectively detect and block spam and phishing attacks.

Data collectedIP address
Console locationAdministrator > Sender Filtering/Authentication > Email Reputation
Console settings

Enable Email Reputation Services

ERS

Back to top

Sender Filtering

Deep Discovery Email Inspector monitors email messages based on sender IP addresses to detect and prevent directory harvest and bounce attacks, and perform SMTP traffic throttling.

Data collectedIP address
Console location

Administrator > Sender Filtering/Authentication > DHA protection

  • Enable directory harvest attack protection

    DHA protection

Administrator > Sender Filtering/Authentication > Bounce attack protection

  • Enable bounce attack protection

    Bounce attack protection

Administrator > Sender Filtering/Authentication > SMTP Traffic Throttling

  • Enable SMTP traffic throttling based on sender IP addresses
  • Enable SMTP traffic throttling based on sender email addresses

    SMTP Traffic Throttling

Console settings

Back to top

Sender Policy Framework (SPF)

Deep Discovery Email Inspector queries DNS records for the sender host name and provides SPF results based on the sender IP address.

Disabling this feature prevents the sending of data to Trend Micro, but will severely affects the ability of Deep Discovery Email Inspector to detect and prevent spoofing.

Data collected
  • IP address
  • Host name
Console locationAdministrator > Sender Filtering/Authentication > SPF
Console settings

Enable Sender Policy Network (SPF)

SPF

Back to top

DMARC

Deep Discovery Email Inspector queries DNS records for the sender host name and provides SPF results based on the sender IP address.

Disabling this feature prevents the sending of data to Trend Micro, but will severely affects the ability of Deep Discovery Email Inspector to detect and prevent spoofing.

Data collected
  • IP address
  • Host name
Console locationAdministrator > Sender Filtering/Authentication > DMARC
Console settings

Enable Domain-based Message Authentication, Reporting and Conformance (DMARC)

DMARC

Back to top

Threat Connect

Threat Connect allows you to view related threat information from the Trend Micro’s global intelligence database.

By clicking View in Threat Connect, Deep Discovery Email Inspector will send data to Trend Micro to query related threat information.

Data collected
  • IP address
  • URL
  • Host name
Console locationDetections > Detected Messages
Console settings

View in Threat Connect

Threat Connect

Back to top

Virtual Analyzer

Delete all image files to disable Virtual Analyzer. Disabling Virtual Analyzer prevents the sending of data to Trend Micro, but severely affects the ability of Deep Discovery Email Inspector to detect malware.

Data collected
  • IP address
  • URL
  • Host name
  • File name
  • File path
Console locationAdministration > Scanning/Analysis > Overview > Images
Console settings

Images

Virtual Analyzer

Back to top