Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Spam mails with Chinese subjects pass InterScan Messaging Security Virtual Appliance (IMSVA) undetected

    • Updated:
    • 10 Nov 2017
    • Product/Version:
    • InterScan Messaging Security Suite 7.1 Linux
    • InterScan Messaging Security Suite 7.1 Windows
    • InterScan Messaging Security Suite 7.5 Windows
    • InterScan Messaging Security Suite 9.1 Linux
    • InterScan Messaging Security Virtual Appliance 9.0
    • InterScan Messaging Security Virtual Appliance 9.1
    • Platform:
    • N/A N/A
Summary

Know the workaround to block spam mails having Chinese subjects not being detected by IMSVA.

Details
Public

Follow these steps:

  1. Add an Expression from Web UI:

    XXX

    XXX

  2. Copy this string “[一-鿿]+”, without quotes, to the Keyword box:

    XXX

    If after pasting the keyword, the keyword in the box looks the same as above, skip Step 3, or remove the pasted keyword and create a new one with Step 3.
  3. Access this Unicode Lookup site, and copy the character to the Keyword box in IMSVA Web UI:

    XXX

    Access this other Unicode Lookup site, and copy the character to the Keyword box as well:

    XXX

    Refer to the screenshot in step 2, add “[“, “-“, “]” and “+” accordingly to compose the expression.
  4. Save the settings.

    XXX

  5. Add a new policy rule:

    XXX

    XXX

    XXX

  6. In case some users need to receive Chinese mails from specific senders, configure the Exception:

    XXX

  7. Configure the scanning criteria:

    XXX

  8. Select the Keyword Expression created in the beginning (Steps 1-4):

    XXX

  9. Configure the Action:

    XXX

  10. Name the rule and set its Order Number (priority). You may put it right under the antivirus rule and spam rule:

    XXX

  11. Save the changes. The final result will be following:

    XXX

Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
1118756
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.