Understanding IP Reputation

Trend Micro Email Security offers two tiers of protection. Connection-based filtering at the MTA connection level, including IP reputation-based filtering provided by Trend Micro Email Reputation Services (ERS), is the first tier. The second is content-based filtering at the message level.

Tip:

IP reputation-based filters use only IP address data to filter messages. You can also use sender email address and domain to filter incoming messages. Approved senders bypass IP reputation-based filtering at the MTA connection level.

See General Order of Evaluation.

See IP Reputation Order of Evaluation.

Trend Micro Email Security makes use of Trend Micro Email Reputation Services (ERS) Standard Service and Advanced Service. Email Reputation Services uses a standard IP reputation database and an advanced, dynamic IP reputation database (a database updated in real time). These databases have distinct entries, allowing Trend Micro to maintain a very efficient and effective system that can quickly respond to new sources of spam.

Configure the following settings on the IP Reputation Settings screen:

  • Dynamic Reputation Settings control how Trend Micro Email Security uses the dynamic IP reputation database from Email Reputation Services Advanced Service.

  • Standard IP Reputation Settings control how Trend Micro Email Security uses the standard IP reputation database from Email Reputation Services Standard Service.

The Approved and Blocked IP Addresses screen shows approved and blocked countries, Internet service providers, IP addresses, and CIDR blocks.