Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring "Scan Exceptions" actions in Hosted Email Security (HES)

    • Updated:
    • 13 Mar 2020
    • Product/Version:
    • Hosted Email Security
    • Hosted Email Security 3.0
    • Platform:
    • N/A N/A

Under certain circumstances, you may want to prevent HES from scanning certain types of messages that may pose security risks. For example, compressed files provide a number of special security concerns since they can harbor security risks or contain numerous compression layers. Scan exceptions are configured to instruct Hosted Email Security to take actions on these messages.

Configure actions for HES to take on email messages and their attachments that meet the scan exception criteria.

Scan exceptions under Inbound Protection apply to incoming messages, while scan exceptions under Outbound Protection apply to outgoing messages. The scan actions configured for each exception apply to all senders and recipients.


To set the action for each of the scan exceptions, do the following:

  1. Go to Inbound Protection / Outbound Protection > Scan Exceptions.

    scan exceptions

    Click image to enlarge.

  2. On the Scan Exceptions screen, in the Actions column, click the action name for an exception. The Select Scan Exception Actions screen appears.

    Actions Column

    Click image to enlarge.

  3. Select the action for the scan exception:

    • Intercept settings.

      Intercept settings

      Click image to enlarge.

      Do not intercept messagesHES does not take action on the message and processes the message using other rules if other rules apply.
      Delete entire messageHES deletes the message, including its attachments.
      QuarantineHES moves the message into quarantine.
    • Modify settings:Modify Settings

      1. Select the Tag subject action to insert configurable text into the message subject line.
      2. Type a tag in the Tag field, for example, Spam.
      3. Optionally select Do not tag digitally signed messages. to prevent tags from breaking digital signatures.
    • Monitor settings:Monitor Settings

      1. Send notification action.
      2. Click the message to people link. The Notifications screen appears.
      3. Select a notification message from the Available pane on the left side and click Add>.
      4. The AddEditCopy and Delete buttons under Available are provided for managing notification messages. For details about managing notifications, see Managing Notifications
      5. Click Save to save the notification setting.
    • Click Save

    If multiple scan exceptions are triggered for one email message, HES chooses the action with the highest priority from the configured "Intercept" actions, combines the action with the "Modify" and "Monitor" actions, and performs those actions together on the message.

    "Intercept" actions are listed as follows in descending order of priority:

    • Delete entire message
    • Quarantine
    • Do not intercept messages
Solution Id:
Did this article help you?

Thank you for your feedback!

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.