Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Deep Discovery Email Inspector 3.2 Data Collection Notice

    • Updated:
    • 17 Oct 2018
    • Product/Version:
    • Deep Discovery Email Inspector 3.2
    • Platform:
    • N/A N/A
Summary

The following sections outline the features that collect data, the data transmitted, and the locations on the product console where you can disable the features.

Details
Public

Web Reputation

Deep Discovery Email Inspector scans URLs in email messages (subject, body, and attachment) and queries the risk rating and category.

Disabling Web Reputation prevents the transmission of data to Trend Micro but severely affects the ability of Deep Discovery Email Inspector to detect malicious URLs.

Data collectedURL
Console locationAdministration > Scanning/Analysis > URL Scanning
Console settings

Disable URL Scanning

Web Reputation

Back to top

Web Inspection Service (WIS)

Deep Discovery Email Inspector scans URLs in email messages (subject, body, and attachment) and queries the threat names for malicious URLs.

Disabling Web Inspection Service prevents Deep Discovery Email Inspector from querying and displaying the threat names for malicious URLs on the management console.

Data collectedURL
Console locationAdministration > Scanning/Analysis > URL Scanning
Console settings

Disable URL Scanning

Web Inspection Service

Back to top

Time-of-Click Protection

Deep Discovery Email Inspector scans URLs in email message body and blocks access to malicious URLs or redirects users to a warning page when a URL is clicked.

Disabling this feature prevents Deep Discovery Email Inspector from scanning URLs at the time of user clicks.

Data collectedURL
Console locationVirtual Analyzer > Sandbox Management > Smart Feedback
Console settings

Enable Time-of-Click Protection

Time of Click Protection

Back to top

Predictive Machine Learning

Disabling this feature prevents the Predictive Machine Learning module from scanning executable and script files for unknown threats, and may result in increased process loading in Virtual Analyzer.

Data collected
  • File name
  • File path
Console locationRDQA > Scan Settings > Predictive Machine Learning
Console settings

Enable Predictive Machine Learning before processing by Virtual Analyzer

Predictive Machine Learning

Back to top

Smart Feedback for Predictive Machine Learning

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • File name
  • File content
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Predictive Machine Learning

Back to top

Smart Feedback for Script Analyzer Engine

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • URL
  • Redirected URL
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Script Analyzer Engine

Back to top

Smart Feedback for Antispam Engine

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • Email recipient
  • Email sender
  • Email subject
  • IP address
  • URL
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Antispam Engine

Back to top

Smart Feedback for Virtual Analyzer

Smart Feedback enables you to participate, share and leverage Trend Micro’s global database of threat related intelligence to rapidly identify and defend against potential threats within your unique network environment.

Data collected
  • File name
  • File content
  • Network connection (IP address and port number)
  • URL
Console locationAdministration > Scanning/Analysis > Smart Feedback
Console settings
  • Enable Smart Feedback
  • Send potentially malicious files to Trend Micro

Smart Feedback for Virtual Analyzer

Back to top

Email Reputation Services (ERS)

Deep Discovery Email Inspector leverages Trend Micro Email Reputation Services to verify IP addresses of incoming email messages using Trend Micro’s reputation database to identify new spam and phishing sources.

Disabling this feature prevents the sending of data to Trend Micro, but will severely affects the ability of Deep Discovery Email Inspector to effectively detect and block spam and phishing attacks.

Data collectedIP address
Console locationAdministrator > Sender Filtering/Authentication > Email Reputation
Console settings

Enable Email Reputation Services

Email Reputation Services

Back to top

Sender Filtering

Deep Discovery Email Inspector monitors email messages based on sender IP addresses to detect and prevent directory harvest and bounce attacks, and perform SMTP traffic throttling.

Data collectedIP address
Console location

Administrator > Sender Filtering/Authentication > DHA protection

  • Enable directory harvest attack protection

    DHA Protection

Administrator > Sender Filtering/Authentication > Bounce attack protection

  • Enable bounce attack protection

    Bounce attack protection

Administrator > Sender Filtering/Authentication > SMTP Traffic Throttling

  • Enable SMTP traffic throttling based on sender IP addresses
  • Enable SMTP traffic throttling based on sender email addresses

    SMTP Traffic Throttling

Console settings

Back to top

Sender Policy Framework (SPF)

Deep Discovery Email Inspector queries DNS records for the sender host name and provides SPF results based on the sender IP address.

Disabling this feature prevents the sending of data to Trend Micro, but will severely affects the ability of Deep Discovery Email Inspector to detect and prevent spoofing.

Data collected
  • IP address
  • Host name
Console locationAdministrator > Sender Filtering/Authentication > SPF
Console settings

Enable Sender Policy Network (SPF)

Sender Policy Framework

Back to top

DMARC

Deep Discovery Email Inspector queries DNS records for the sender host name and provides SPF results based on the sender IP address.

Disabling this feature prevents the sending of data to Trend Micro, but will severely affects the ability of Deep Discovery Email Inspector to detect and prevent spoofing.

Data collected
  • IP address
  • Host name
Console locationAdministrator > Sender Filtering/Authentication > DMARC
Console settings

Enable Domain-based Message Authentication, Reporting and Conformance (DMARC)

DMARC

Back to top

Threat Connect

Threat Connect allows you to view related threat information from the Trend Micro’s global intelligence database.

By clicking View in Threat Connect, Deep Discovery Email Inspector will send data to Trend Micro to query related threat information.

Data collected
  • IP address
  • URL
  • Host name
Console locationDetections > Detected Messages
Console settings

View in Threat Connect

Threat Connect

Back to top

Virtual Analyzer

Delete all image files to disable Virtual Analyzer. Disabling Virtual Analyzer prevents the sending of data to Trend Micro, but severely affects the ability of Deep Discovery Email Inspector to detect malware.

Data collected
  • IP address
  • URL
  • Host name
  • File name
  • File path
Console locationAdministration > Scanning/Analysis > Overview > Images
Console settings

Images

Virtual Analyzer

Back to top

Premium
Internal
Rating:
Category:
Configure
Solution Id:
1121034
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.