Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Deploying Deep Discovery Email Inspector (DDEI) in BCC mode using InterScan Messaging Security Virtual Appliance (IMSVA)

    • Updated:
    • 14 Mar 2020
    • Product/Version:
    • Deep Discovery Email Inspector 2.6
    • Deep Discovery Email Inspector 3.0
    • Platform:
    • N/A N/A

If deploy DDEI in BCC mode, emails will be forwarded to end users directly by upstream MTA without any delay. At the same time, upstream MTA needs to BCC those emails to DDEI.

This article will show you how to implement this deployment if upstream MTA is IMSVA.


DDEI configuration:

  1. On the DDEI web console, go to Administration > System Settings.

  2. In the Operation Mode section, select BCC mode then click Save.


The user needs to configure “Permitted Senders of Relayed Mail” to allow DDEI to receive emails from IMSVA.

For instructions on specifying the Permitted Senders of Relayed Mail, follow Step 4 on DDEI Online Help: Configuring Limits and Exceptions


IMSVA configuration:

  1. On the IMSVA web console , go to Policy > Policy List.
  2. Click Add | Others.

  3. In the "Select Recipients and Senders" page, you can set this policy for some dedicated users. 

    • Click Recipients to define the recipients.
    • Click Senders to define the senders.
    • Click Sender to Recipient to define the exception list.

     Click Next.

  4. Click Next. The "Select Scanning Conditions" page will appear. 

    If the email matches the condition(s) you selected on this page, it will take the action which is BCC to DDEI (this action will be introduced in step 5), using this rule. If you do not select any condition(s) on this page, it means all emails will trigger this rule if the user addresses match the "Select Recipients and Senders" setting in step 3. The following screenshot shows the pop-up message if you do not select any condition(s).

  5. The "Select Actions" page will allow you to define the actions. Select BCC action then type the email address in. Click Next.

    It’ is suggested to use a virtual domain only for DDEI, because if you use and if upstream MTA does not support smart host with priority, this BCC email might be forwarded to the downstream MTA/MDA directly. Here is just one example.

  6. In the "Name and Order" page, name the rule and arrange it in a suitable order depending on your demand. You can put it as order 1 if you want this rule to be triggered first. You can also put it after an anti-virus rule and an anti-spam rule. Then click finish.

    BCC action is not the terminal action. This means the next rule will also be triggered. If this email is a SPAM and the next rule is an anti-SPAM rule and the action is quarantine, then the email will not be forwarded to DDEI because quarantine is the terminal action.

  7. Go to Administration > SMTP Routing | Message Delivery. Click Add and you can see the "Add Message Delivery Settings" page. Add one entry that can forward the BCC email to DDEI.

    “Server Address” is DDEI’s IP address.

  8. Send one test email to IMSVA to verify if it was sent to DDEI. For support assistance, contact Trend Micro Technical Support
Solution Id:
Did this article help you?

Thank you for your feedback!

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.