Configuring High Profile Users | Trend Micro Service Central

Views:

Since Business Email Compromise (BEC) scams target high profile users such as company executives, Hosted Email Security allows you to add high profile users who are likely to be impersonated for detection and classification.

Specify the email display names of the high profile users who might be frequently forged. Hosted Email Security will check incoming email messages claimed to be sent from those users and apply fraud checking criteria to identify forged messages. Hosted Email Security enables you to take actions on either the analyzed or probable BEC attacks.

The specified high profile users are applicable to all BEC policies of your domains as the global settings.

Go to Inbound Protection > Business Email Compromise (BEC).
From the Source drop-down list, select either of the following:
- Synchronize users from Active Directory: select this option to synchronize users from your active directory.
  - Click Select Groups to select a user group that you want to synchronize.
    
    A maximum of 100 users can be synchronized from one or multiple Active Directory groups. If there are more than 100 users, Hosted Email Security sorts all users alphanumerically in ascending order and applies BEC policies only to the first 100 users.
    
    Note:
    The Active Directory Synchronization Tool is required to synchronize user information from the Active Directory server. For details about installing and updating the tool, see the Active Directory Synchronization Tool Guide.
    
    If you select Microsoft AD Global Catalog for synchronization in the Active Directory Synchronization Tool, make sure the givenName, initials and sn attributes have been replicated. By default, these attributes are not replicated to the global catalog server by Microsoft. If they are not replicated, use the Active Directory Schema snap-in in the Microsoft Management Console for replication.
  - Click Export to export the Active Directory user list to a CSV file.
  - Click Refresh to refresh the current user list.
- Custom: select this option to create a customized list of high profile users.
  - Click Add to add a high profile user. Specify the first name, middle name (optional), and last name of the user.
  - Click Delete to delete a high profile user.
  - Click Import to import multiple users from a CSV file.
    
    The following import options are available:
    - Merge: append the users to the existing list.
    - Overwrite: replace the existing list with the users in the file.
  - Click Export to export the customized user list to a CSV file.