Summary
When DDEI is deployed in blind carbon copy (BCC) mode, the emails will be directly forwarded to the end-users via upstream MTA without any delay. At the same time, the upstream MTA needs to BCC those emails to DDEI.
Implement the BCC deployment mode using Symantec Messaging Gateway (SMG) as the upstream MTA.
Details
Step A. Configure the DDEI settings
- Open the DDEI web console.
- Go to Administration > System Settings.
- Under the Operation Mode section, select the BCC mode radio button and click Save.
Step B. Configure the Symantec Messaging Gateway
- Open the Symantec Messaging Gateway console.
- Go to Content > Policies > Email.
- Click Add to create a new filtering policy. It is not suggested to modify the existing malware policy to BCC known malwares to DDEI. This is because DDEI aims to detect unknown threats.
- Use the Blank template and click Select.
- Enter a name in the Policy name field.
- Under the Condition section, select For all messages check box.
- Select the BCC action and add a recipient.
It is recommended to use a virtual domain for DDEI only. If you use admin@yourdomain.com and the upstream MTA does not support smart host with priority, the BCC email might be forwarded directly to the downstream MTA/MDA.
- Tick the policy group to be applied and click Save.
- Go to Administration > Users > Policy Groups.
- Select the policy group you used in the Step 8 and add the DDEI rule in this list, then click Save.
- Navigate to Protocols > SMTP > Domains.
- Add the virtual domain BCC address for DDEI in the Domain or email address field.
- Select Destination Hosts and enter the DDEI's IP address, then click Save.
- Send one test email to verify if it is working from BCC to DDEI. If not, contact Trend Micro Technical Support.
