Configure DNS MX records so that the IMSVA Cloud-Prefilter can intercept mails for scanning.
To configure the DNS MX records for Cloud Pre-filter:
Assume that the following is the current DNS MX record of your-domain.com:
your-domain.com MX preference = 10, mail exchanger = mail01.your-domain.com
your-domain.com MX preference = 10, mail exchanger = mail02.your-domain.com
mail01.your-domain.com internet address = 1.1.1.1
mail02.your-domain.com internet address = 1.1.1.2
- Retrieve the Cloud Pre-Filter inbound server address from the Domain tab for a policy.
- Click Cloud Pre-Filter. The Cloud Pre-Filter Policy List screen appears.
- Click the name of an existing policy in the Policy List. The Edit Policy screen appears with the Domain tab displaying.
The addresses display in the Inbound Server Addresses area of the Domain tab.
- Modify the Mail Exchange (MX) records as follows:
your-domain.com MX preference = 10, mail exchanger = <The addresses display in the Inbound Server Addresses area of the Domain tab>
your-domain.com MX preference = 30, mail exchanger = mail01.your-domain.com
your-domain.com MX preference = 30, mail exchanger = mail02.your-domain.com
mail01.your-domain.com internet address = 1.1.1.1
mail02.you-domain.com internet address = 1.1.1.2
The previous MX record for pre-filter domain was in the form of your-domain.com.eXXXX.gXXXX.ngXXXX.im.emailsecurity.trendmicro.eu. It was too long and caused issues in the Domain Name System (DNS). Therefore, the MX record have been changed to one of below:
- US: im.emailsecurity.trendmicro.com
- EU: prefilter.emailsecurity.trendmicro.eu
The change won't impact customers who are using the long format as both long and short FQDNs are pointing to the same IP.
After making the modifications to the MX records, Cloud Pre-Filter is the major point of entry for your domain. After the DNS record changes take effect (up to 72 hours), all inbound email message traffic is routed to Cloud Pre-Filter.
- Modify your DNS MX records to include your own MX as lower priority. This will allow your existing MX records to act as a backup to Cloud Pre-filter
- Ensure you have the same policies enforced on your on-premise IMSVA as the ones in Cloud Pre-filter. The benefit of this duplicate policy is to maintain protection for your business during a rare occurrence of Cloud Pre-filter service being unavailable.
- As our sizing guide recommends, please ensure you have enough onsite capacity to process the full email load for a short time if the Pre-filter is not available.
