Viewing the TMEMS mail tracking log information:

1. Login to TMEMS console
2. Go to Logs > Mail Tracking
3. Fill in the following criteria based on the email you are looking for.

   Example:

   • Period: Last 24 hours
   • Direction: Incoming
   • Recipient: recipient@trendmicro.com
   • Sender: sender@trendmicro.com
   • Type: Accepted traffic

   

   ^{Click the image to enlarge.}

4. Click Search.
5. It will provide details based on the Type criteria you selected.
   1. For the Type: Accepted traffic, you can click the timestamp to check the mail tracking details of the email.

      

      ^{Click the image to enlarge.}

      

      ^{Click the image to enlarge.}

      Actions: This shows all the policies on where the email went through. This also indicates if the email has violated any policy and what action has been done.

      

      ^{Click the image to enlarge.}

       

      Use case: Usual users concerns are legitimate mail got quarantined, spam or malicious mail was delivered without getting quarantined or deleted. It is great practice for users to check this area as this will give them idea on how to configure their TMES policies.

      In this example a malicious mail was delivered, and the recipient/sender/admin received an email notification.

      

      ^{Click the image to enlarge.}

       

      If you check the actual policy on the Inbound Protection, the policy was configured this way.

      Do not intercept messages is selected that's why on the logs it is Bypassed and Send notification is checked.

      

      ^{Click the image to enlarge.}

   2. For the Type: Blocked traffic, you can already see the reason why the emails were blocked.

      

      ^{Click the image to enlarge.}

For more information about mail tracking log details, refer to Understanding mail tracking.