Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Attachment Phishing in InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 Patch 3

    • Updated:
    • 9 Dec 2019
    • Product/Version:
    • InterScan Messaging Security Virtual Appliance 9.1
    • Platform:
    • N/A N/A
Summary

Learn about the Attachment Phishing feature introduced in IMSVA 9.1 Patch 3, and know the procedures to enable it.

Details
Public

IMSVA patch 3 can enable Web Reputation Services (WRS) policy to automatically extract URLs from file attachments, and to check the safety of each URL.

When the feature is enabled, IMSVA can extract hyperlink in PDF, MS word, HTML and text attachment, then analyze them with WRS. If the URL sandbox feature is enabled too, IMSVA will also submit the extracted URLs to Virtual Analyzer.

The supported file type list:

File TypeFile Extension
PDFpdf
Worddoc, docx
Excelxls, xlsx
PowerPointppt, pptx
XPSxps
TXTtxt
RTFrtf
MIMEeml
HTMLhtml, htm
Compressed filearj
cab
gz
7z
bz2
rar
tar
zip
jar
ace

To enable Attachment Phishing:

  1. SSH to IMSVA with root credential, using PuTTY or other software supporting SSH protocol.
  2. Connect to the database by running the following command:
    /opt/trend/imss/PostgreSQL/bin/psql imss sa
  3. Add a hidden key in the database by running the following command:
    insert into tb_global_setting (section, name, value, inifile) VALUES ('wrs', 'enable_extract_att_url', 'yes', 'imss.ini');
  4. Close the database connection using the command, \q .
  5. Restart the scan service using the command, S99IMSS restart .
 
Perform the same configuration for child devices.
Premium
Internal
Rating:
Category:
Purchase
Solution Id:
1122214
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.