Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Policy for allowing trusted senders that failed Hosted Email Security (HES) DMARC checking

    • Updated:
    • 8 Oct 2019
    • Product/Version:
    • Hosted Email Security
    • Platform:
    • N/A N/A
Summary

This article provides a guide on how to create a policy on Hosted Email Security (HES) to allow valid senders that are blocked due to DMARC policy.

Details
Public
  1. Go to Inbound Protection > Domain-based Authentication > Domain-based Message Authentication, Reporting and Conformance (DMARC). Expand the Intercept section and select Do not Intercept messages for all the values.

    Do not intercept

  2. Go to Inbound Protection > Policy Objects > Keyword Expressions. The Add Keyword Expression Category window will appear. Enter a List name. For this example, we used "DMARC Checking" as the list name. Click Add to a add Keyword Expression/s.

    Add Keyword Expression

  3. Create a policy to quarantine email for domains that are not under your sender exceptions policy. Go to Inbound Protection > Policy > Add Rule. To create a policy for all your domains, got to the Recepients and Senders tab on the left pane, expand the Sender Exceptions section and type the domain or email address then click Add.

    Sender Exceptions

  4. Go to the Scanning Criteria tab on the left pane, tick the Advanced radio button and click keyword expressions. The Header Keyword Expressions popup window will appear. Under, Specified header matches, select  Other then enter “X-TM-Authentication-Results” in the field next to it. Add the DMARC policy rule that you created on step 2, which is "DMARC Checking".

    Header Keyword Expressions window

  5. Go to the Actions tab on the left pane, expand the Intercept section then select Quarantine.

    Actions tab

 
Note that the changes will take effect in about an hour.
 
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1123095
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.