web
You’re offline. This is a read only version of the page.
close

Online Help Center
  • Search
  • Support
    • For Home
    • For Business
  • English (US)
    • Bahasa Indonesia (Indonesian)
    • Dansk (Danish)
    • Deutsch (German)
    • English (Australia)
    • English (US)
    • Español (Spanish)
    • Français (French)
    • Français Canadien
      (Canadian French)
    • Italiano (Italian)
    • Nederlands (Dutch)
    • Norsk (Norwegian)
    • Polski (Polish)
    • Português - Brasil
      (Portuguese - Brazil)
    • Português - Portugal
      (Portuguese - Portugal)
    • Svenska (Swedish)
    • ภาษาไทย (Thai)
    • Tiếng Việt (Vietnamese)
    • Türkçe (Turkish)
    • Čeština (Czech)
    • Ελληνικά (Greek)
    • Български (Bulgarian)
    • Русский (Russian)
    • עברית (Hebrew)
    • اللغة العربية (Arabic)
    • 日本語 (Japanese)
    • 简体中文
      (Simplified Chinese)
    • 繁體中文
      (Traditional Chinese)
    • 繁體中文 HK
      (Traditional Chinese)
    • 한국어 (Korean)
This website uses cookies for website functionality and traffic analytics. Our Cookie Notice provides more information and explains how to amend your cookie settings.
Learn More Yes, I agree
Table of Contents
The page you're looking for can't be found or is under maintenance
Try again later or go to the home page
Go to home page
  • Privacy and Personal Data Collection Disclosure
  • Introducing ScanMail and Getting Started
    • Introducing Trend Micro ScanMail for Microsoft Exchange
      • System Requirements
        • ScanMail with Exchange Server 2019
        • ScanMail with Exchange Server 2016
        • Cluster Installations
        • ScanMail Integration with Trend Micro Products
      • What’s New
      • Features and Benefits
        • Web-based Product Console
        • Installation and Support
        • Antivirus Features and Scan Types
        • Multiple Scan Filters
        • Informative Monitoring Tools
      • How ScanMail Protects the Microsoft Exchange Environment
      • About Uncleanable Files
      • ScanMail Technology
        • Trend Micro Scan Technology
          • Scan Engine Updates
        • The Trend Micro Pattern Files
          • Pattern File Numbering
          • How the Scan Engine Works with the Pattern File
        • About ActiveUpdate
          • Incremental Updates of the Pattern File
          • Using ActiveUpdate with ScanMail
        • IntelliScan
        • IntelliTrap
        • Trend Micro AntimalwareScanCore
        • About Hot Fixes, Patches, and Service Packs
        • Enterprise Protection Strategy
        • Outbreak Prevention Services
    • Getting Started with ScanMail
      • Getting Started
      • Understanding the Product Console
        • Viewing the Product Console on a Local Server
        • Viewing the Product Console from a Remote Server
        • Product Console Main View
        • Product Console Elements
          • Banner
          • Side Menu
          • Configuration Area
        • Getting Help While Using the ScanMail Product Console
      • ScanMail Registration
        • Online Purchase
        • Reseller Purchase
        • Registering ScanMail
      • ScanMail Activation
        • Activating ScanMail During Installation
        • Activating ScanMail Using the Product Console
        • Activation Codes
          • Standard Activation Code
          • Suite Activation Code
            • Suite Activation Code with Additional Features
          • Activation Code Comparison
        • Reactivating ScanMail
      • About ScanMail Updates
        • Updating ScanMail - Prerequisite Tasks
        • Configuring Proxy Settings
        • Configuring Manual Updates
        • Configuring Scheduled Update
        • Configuring the Download Source
      • Office 365 Protection with Trend Micro Cloud App Security
    • Establishing and Maintaining Security for Your Exchange Servers
      • Establishing a Security Baseline
      • Maintaining Security
      • Managing Outbreak Situations
    • Managing ScanMail
      • Understanding Real-time Monitor
        • Viewing Real-time Monitor for a Remote Server
      • Understanding the Server Management Console
        • Activating Server Management
        • Using the Server Management Console
        • Viewing Servers from the Product Console
        • Using Server Management to Replicate Configurations
      • Starting and Stopping the Services
      • Understanding ScanMail Icons
  • Configuring Scans and Scan Filters
    • Understanding Smart Protection
      • About Trend Micro Smart Protection
        • The Need for a New Solution
        • Smart Protection Services
          • File Reputation Services
          • Web Reputation Services
        • Smart Protection Sources
          • Trend Micro Smart Protection Network
          • Smart Protection Server
          • Smart Protection Sources Compared
        • Smart Protection Pattern Files
      • Configuring Local Sources
      • Scan Service Settings
    • Configuring Scans
      • About Scans
        • Real-time Scan
        • Manual Scan
        • Scheduled Scan
          • Scheduled Scan List
        • About Manual Scans and Scheduled Scans on Cluster Servers
        • Manual and Scheduled Scan Settings
      • Compressed File Handling
        • Compression Types
        • Blocking All Compressed Attachments
        • Security Risk Scan Compressed File Restrictions
      • About ScanMail Actions
        • Scan Actions by Scan Settings
        • Advanced Scan Action Options
      • Notifications
        • Notification Settings
    • Configuring Security Risk Scans
      • About Security Risk Scans
      • ScanMail Scan Hierarchy
        • About Advanced Threat Scan Engine
        • About Predictive Machine Learning
      • Security Risk Scan Actions
        • Using Customized Scan Actions
      • Enabling Real-time Security Risk Scan
      • Configuring Security Risk Scan Targets
      • Configuring Security Risk Scan Actions
        • Configuring Macro Scanning
      • Configuring Security Risk Scan Notifications
    • Configuring Attachment Blocking
      • About Attachment Blocking
      • Enabling Real-time Attachment Blocking
      • About the Attachment Blocking Global Policy
        • Configuring Attachment Blocking Targets
        • Configuring Attachment Blocking Actions
        • Configuring Attachment Blocking Notifications
      • Adding an Exception to the Attachment Blocking Global Policy
      • Editing an Attachment Blocking Exception
      • Adding a Customized Policy
      • Editing a Customized Policy
    • Configuring Content Filtering
      • About Content Filtering
        • Active Directory Integrated Policies
        • Data Leakage Prevention
      • Enabling Real-time Content Filtering
      • Global Settings
      • Configuring Content Filtering Policies
        • Configuring the Senders and Recipients List (Match any or apply to all)
        • Configuring Content Filtering Targets
          • Imported Keyword Lists
        • Configuring Content Filtering Actions
        • Configuring Content Filtering Notifications
        • Enabling a Content Filtering Policy
      • Configuring a Content Filtering Exception
      • Editing a Content Filtering Policy
    • Configuring Data Loss Prevention
      • About Data Loss Prevention (DLP)
      • Data Identifier Types
        • Expressions
          • Predefined Expressions
          • Customized Expressions
            • Criteria for custom expressions
          • Adding and Editing Expressions
          • Importing Expressions
        • Keywords
          • Predefined Keyword Lists
          • Custom keyword lists
            • Custom keyword list criteria
          • Adding and Editing Keyword Lists
          • Importing Keyword Lists
        • File Attributes
          • Predefined File Attributes
          • Customized File Attributes
          • Adding and Editing File Attributes
          • Importing File Attributes
      • About Data Loss Prevention Templates
        • Predefined DLP Templates
        • Defining a Data Loss Prevention Template
        • Deleting a Data Loss Prevention Template
        • Importing a Data Loss Prevention Template
        • Exporting a Data Loss Prevention Template
      • About Data Loss Prevention Policies
        • Enabling Real-time Data Loss Prevention
        • Global Settings
        • Configuring a Data Loss Prevention Policy
          • Selecting Accounts
          • Configuring DLP Targets
          • Configuring DLP Actions
          • Configuring DLP Notifications
          • Enabling a DLP Policy
    • Configuring Spam Prevention
      • About Spam Prevention
        • Spam Folder Configuration
      • About Email Reputation
        • Trend Micro Email Reputation Standard
        • Trend Micro Email Reputation Advanced
        • Enabling Email Reputation
        • Configuring Email Reputation Targets
        • Configuring Email Reputation Actions
      • About Content Scanning
        • Spam Engine and Spam Pattern Files
        • End User Quarantine
        • Approved and Blocked Sender Lists
        • Spam Filter
        • New Spam Sources
        • Enabling Content Scanning
        • Configuring Content Scanning Targets
        • Configuring Content Scanning Actions
    • Configuring Advanced Spam Prevention
      • About Advanced Spam Prevention
        • About Business Email Compromise
        • About Writing Style Verification in ScanMail
      • Configuring Advanced Spam Prevention Settings
        • Enabling Advanced Spam Prevention
        • Configuring Advanced Spam Prevention Scan Targets
        • Configuring Advanced Spam Prevention Scan Actions
        • Configuring Advanced Spam Prevention Scan Notifications
      • Configuring Writing Style Training Settings
        • Performing Writing Style Manual Training
        • Configuring Writing Style Regular Training Settings
      • Configuring Writing Style Verification Settings
        • Enabling Writing Style Verification
        • Configuring Writing Style Verification Settings
    • Configuring Web Reputation
      • About Web Reputation Services
        • Command & Control Contact Alert Services
      • Configuring the Web Reputation Scan Service
      • Enabling Web Reputation
      • Configuring Web Reputation Targets
      • Configuring Web Reputation Actions
      • Configuring Web Reputation Notifications
    • Configuring URL Time-of-Click Protection
      • About URL Time-of-Click Protection
      • Enabling URL Time-of-Click Protection
      • Configuring URL Time-of-Click Protection
    • Configuring Search & Destroy
      • About Search & Destroy
      • Configuring Search & Destroy Access Accounts
      • Activating Search & Destroy
      • About Mailbox Searches
        • Syntax Used for Keyword Strings
        • Mailbox Search Options
      • Configuring a Mailbox Search
        • Modifying a Mailbox Search
        • Deleting a Mailbox Search
        • Viewing Mailbox Search Results
      • Configuring Search & Destroy Settings
      • Viewing Search & Destroy Event Logs
      • Troubleshooting Search & Destroy
    • Configuring Virtual Analyzer
      • About Virtual Analyzer
      • Configuring Virtual Analyzer Settings
  • Managing ScanMail
    • Managing the Quarantine Area
      • About the Quarantine
      • Configuring the Quarantine Folder/Directory
      • Performing a Quarantine Query
      • Scheduling Automatic Quarantine Maintenance
      • Manually Performing Quarantine Maintenance
      • Resending Quarantined Messages
    • Monitoring ScanMail
      • Viewing the Summary Screen
        • Summary: System
        • Summary: Security Risks
        • Summary: Spam
        • Summary: Ransomware
      • About Alerts
        • System Events
        • Outbreak Alerts
        • Alert Notification Settings
      • About Reports
        • One-time Reports
          • Generating One-time Reports
        • Scheduled Reports
          • Generating Scheduled Reports
        • Report Maintenance
      • About Logs
        • Types of Logs
        • Querying Logs
        • Log Maintenance
          • Performing Manual Log Maintenance
          • Performing Scheduled Log Maintenance
          • Configuring Log Forwarding Settings
    • Performing Administrative Tasks
      • Configuring Proxy Settings
      • Configuring Global Approved List
      • Configuring Mail Settings
      • Global Notification Settings
        • Configuring Global Notification Settings
      • Configuring Spam Maintenance
      • About Access Control
        • Access Control Permissions
        • Enabling Access Control
        • Configuring Access Control
      • About Special Groups
        • Configuring Special Groups
      • About Server Groups
        • Configuring Server Groups
      • About Internal Domains
        • Configuring Internal Domains
      • Product License
      • About Trend Micro Apex Central
        • About Trend Micro Management Communication Protocol
        • Using ScanMail with Apex Central
        • Registering to Apex Central or Control Manager
        • Unregistering ScanMail from Apex Central
      • Using ScanMail with Deep Discovery Director
      • Configuring FIPS Settings
      • Using Trend Support / System Debugger
    • Integrating with Cloud App Security
      • About Cloud App Security Integration Feature
      • Prerequisites for Cloud App Security Integration
      • Registering a ScanMail Server to Cloud App Security
      • Viewing Policy Violation Logs on the Cloud App Security Management Console
      • Managing Quarantined Email Messages on the Cloud App Security Management Console
      • Unregistering a ScanMail Server from Cloud App Security
      • Deleting the Registration Token
    • Integrating with Trend Vision One
      • Integrating ScanMail with Trend Vision One
      • Unregistering ScanMail from Trend Vision One
  • Getting Help
    • Understanding Security Risks
      • Understanding the Terms
      • About Internet Security Risks
        • Viruses/Malware
          • Virus/Malware Writers
          • Malware Naming
        • Compressed Files
        • Joke Programs
        • Macro Viruses/Malware
        • Mass-Mailing Attacks
        • Trojan Horse Programs
        • Worms
        • Zip of Death
      • About Spyware/Grayware
        • Potential Risks and Threats
          • How Spyware/Grayware Gets into your Network
        • Encoding Types
        • Multipurpose Internet Mail Extensions (MIME) Types
        • True File Type
        • Disease Vector
        • Phish
    • Frequently Asked Questions
      • Scanning and Updating
        • Do I have the latest pattern file or Service Pack?
          • Locating the ScanMail Version
        • Where can I find the latest patches for updating ScanMail?
      • Expressions and Keywords
        • What are regular expressions?
        • How do I use keywords?
        • How do I use operators with keywords?
      • File Handling
        • How do I handle large files?
        • What is a compression ratio?
        • How do I calculate the size of a decompressed file?
      • Quarantine and Log Management
        • Are UNC paths supported for quarantine and backup folders?
        • Are mapped network drives supported for quarantine and backup folders?
        • How does ScanMail display the "Scan Time" or "Delivery Time" for remote servers?
        • How does ScanMail generate centralized report data for multiple servers?
        • Does the ScanMail web service port need to be added to the firewall port exception list before generating centralized logs or quarantine queries?
        • Can I re-create the End User Quarantine spam folder after deleting it?
        • How to cleanup ScanMail email messages that were temporarily quarantined for advanced threat analysis?
      • Logs, Quarantine Records, and Server Groups
        • How do I increase number of query results for each remote server?
        • How do I update newly installed ScanMail servers to the Server Groups list?
      • Logging On and Registration
        • Where can I find my Activation Code and Registration Key?
        • What if the remote SQL server database account password is changed?
        • What if the remote Windows authentication database account password is changed?
      • Security Threats
        • What is spyware/grayware?
        • What are phish attacks?
        • What is the EICAR test virus?
        • What are false positives?
        • Are some files dangerous?
        • How do I send Trend Micro suspected Internet threats?
        • How do I send Trend Micro detected viruses?
      • Virtual Analyzer
        • What are different working modes in Virtual Analyzer and which one should I choose?
        • If ScanMail is integrated with Virtual Analyzer, can I install the latest version of ScanMail along with an older version?
    • Troubleshooting
      • Updating the Scan Engine Manually
      • Updating the Pattern File (lpt$vpn.xxx) Manually
      • Known Issues
    • Technical support
      • Troubleshooting resources
        • Using the support portal
        • Threat encyclopedia
      • Contacting Trend Micro
        • Speeding up the support call
      • Sending suspicious content to Trend Micro
        • Email Reputation Services
        • File Reputation Services
        • Web Reputation Services
      • Other resources
        • Download center
  • ScanMail Windows Event Log Codes
  • Best Practices
    • Set Up Account for Installation with Microsoft Windows Authentication
    • Attachment Blocking Policies
      • Exception Rule Replication
      • Sample Usage Scenarios
    • Content Filtering Active Directory Integrated Policies
      • Content Filtering Policy Replication
    • Data Loss Prevention Policies
      • Data Identifiers and Template Creation
      • Data Loss Prevention Policy Replication
      • Data Loss Prevention: Hidden Keys
    • Optimizing Web Reputation
      • Troubleshooting Web Reputation Performance Issues
    • Search & Destroy Best Practices
      • Search & Destroy Prerequisites
      • Using Search & Destroy in Mixed Exchange Environments
        • Preparing Exchange Server 2016/2019 for Mixed Exchange Environments
      • Configuring Search & Destroy in a Multiple Data Center Environment
      • Optimizing Search Criteria
      • Optimizing Mailbox Searches
      • Deleting Mailbox Searches
      • Exchange Management Shell Commands
        • Service Account Settings
        • Discovery Mailbox Settings
        • Backend Search Tasks
    • Virtual Analyzer - Integration Pre-requisites
    • Internal Domains
    • Recommended Settings
Configuring Advanced Spam Prevention
This chapter explains how to configure Advanced Spam Prevention to protect your Exchange environment.
Topics include:
  • About Advanced Spam Prevention
  • About Business Email Compromise
  • About Writing Style Verification in ScanMail
  • Configuring Advanced Spam Prevention Settings
  • Configuring Writing Style Training Settings
  • Configuring Writing Style Verification Settings
Online Help Center
Support
For Home For Business
Privacy Notice
© 2025 Trend Micro Incorporated. All rights reserved.
Table of Contents
  • Privacy and Personal Data Collection Disclosure
  • Introducing ScanMail and Getting Started
    • Introducing Trend Micro ScanMail for Microsoft Exchange
      • System Requirements
        • ScanMail with Exchange Server 2019
        • ScanMail with Exchange Server 2016
        • Cluster Installations
        • ScanMail Integration with Trend Micro Products
      • What’s New
      • Features and Benefits
        • Web-based Product Console
        • Installation and Support
        • Antivirus Features and Scan Types
        • Multiple Scan Filters
        • Informative Monitoring Tools
      • How ScanMail Protects the Microsoft Exchange Environment
      • About Uncleanable Files
      • ScanMail Technology
        • Trend Micro Scan Technology
          • Scan Engine Updates
        • The Trend Micro Pattern Files
          • Pattern File Numbering
          • How the Scan Engine Works with the Pattern File
        • About ActiveUpdate
          • Incremental Updates of the Pattern File
          • Using ActiveUpdate with ScanMail
        • IntelliScan
        • IntelliTrap
        • Trend Micro AntimalwareScanCore
        • About Hot Fixes, Patches, and Service Packs
        • Enterprise Protection Strategy
        • Outbreak Prevention Services
    • Getting Started with ScanMail
      • Getting Started
      • Understanding the Product Console
        • Viewing the Product Console on a Local Server
        • Viewing the Product Console from a Remote Server
        • Product Console Main View
        • Product Console Elements
          • Banner
          • Side Menu
          • Configuration Area
        • Getting Help While Using the ScanMail Product Console
      • ScanMail Registration
        • Online Purchase
        • Reseller Purchase
        • Registering ScanMail
      • ScanMail Activation
        • Activating ScanMail During Installation
        • Activating ScanMail Using the Product Console
        • Activation Codes
          • Standard Activation Code
          • Suite Activation Code
            • Suite Activation Code with Additional Features
          • Activation Code Comparison
        • Reactivating ScanMail
      • About ScanMail Updates
        • Updating ScanMail - Prerequisite Tasks
        • Configuring Proxy Settings
        • Configuring Manual Updates
        • Configuring Scheduled Update
        • Configuring the Download Source
      • Office 365 Protection with Trend Micro Cloud App Security
    • Establishing and Maintaining Security for Your Exchange Servers
      • Establishing a Security Baseline
      • Maintaining Security
      • Managing Outbreak Situations
    • Managing ScanMail
      • Understanding Real-time Monitor
        • Viewing Real-time Monitor for a Remote Server
      • Understanding the Server Management Console
        • Activating Server Management
        • Using the Server Management Console
        • Viewing Servers from the Product Console
        • Using Server Management to Replicate Configurations
      • Starting and Stopping the Services
      • Understanding ScanMail Icons
  • Configuring Scans and Scan Filters
    • Understanding Smart Protection
      • About Trend Micro Smart Protection
        • The Need for a New Solution
        • Smart Protection Services
          • File Reputation Services
          • Web Reputation Services
        • Smart Protection Sources
          • Trend Micro Smart Protection Network
          • Smart Protection Server
          • Smart Protection Sources Compared
        • Smart Protection Pattern Files
      • Configuring Local Sources
      • Scan Service Settings
    • Configuring Scans
      • About Scans
        • Real-time Scan
        • Manual Scan
        • Scheduled Scan
          • Scheduled Scan List
        • About Manual Scans and Scheduled Scans on Cluster Servers
        • Manual and Scheduled Scan Settings
      • Compressed File Handling
        • Compression Types
        • Blocking All Compressed Attachments
        • Security Risk Scan Compressed File Restrictions
      • About ScanMail Actions
        • Scan Actions by Scan Settings
        • Advanced Scan Action Options
      • Notifications
        • Notification Settings
    • Configuring Security Risk Scans
      • About Security Risk Scans
      • ScanMail Scan Hierarchy
        • About Advanced Threat Scan Engine
        • About Predictive Machine Learning
      • Security Risk Scan Actions
        • Using Customized Scan Actions
      • Enabling Real-time Security Risk Scan
      • Configuring Security Risk Scan Targets
      • Configuring Security Risk Scan Actions
        • Configuring Macro Scanning
      • Configuring Security Risk Scan Notifications
    • Configuring Attachment Blocking
      • About Attachment Blocking
      • Enabling Real-time Attachment Blocking
      • About the Attachment Blocking Global Policy
        • Configuring Attachment Blocking Targets
        • Configuring Attachment Blocking Actions
        • Configuring Attachment Blocking Notifications
      • Adding an Exception to the Attachment Blocking Global Policy
      • Editing an Attachment Blocking Exception
      • Adding a Customized Policy
      • Editing a Customized Policy
    • Configuring Content Filtering
      • About Content Filtering
        • Active Directory Integrated Policies
        • Data Leakage Prevention
      • Enabling Real-time Content Filtering
      • Global Settings
      • Configuring Content Filtering Policies
        • Configuring the Senders and Recipients List (Match any or apply to all)
        • Configuring Content Filtering Targets
          • Imported Keyword Lists
        • Configuring Content Filtering Actions
        • Configuring Content Filtering Notifications
        • Enabling a Content Filtering Policy
      • Configuring a Content Filtering Exception
      • Editing a Content Filtering Policy
    • Configuring Data Loss Prevention
      • About Data Loss Prevention (DLP)
      • Data Identifier Types
        • Expressions
          • Predefined Expressions
          • Customized Expressions
            • Criteria for custom expressions
          • Adding and Editing Expressions
          • Importing Expressions
        • Keywords
          • Predefined Keyword Lists
          • Custom keyword lists
            • Custom keyword list criteria
          • Adding and Editing Keyword Lists
          • Importing Keyword Lists
        • File Attributes
          • Predefined File Attributes
          • Customized File Attributes
          • Adding and Editing File Attributes
          • Importing File Attributes
      • About Data Loss Prevention Templates
        • Predefined DLP Templates
        • Defining a Data Loss Prevention Template
        • Deleting a Data Loss Prevention Template
        • Importing a Data Loss Prevention Template
        • Exporting a Data Loss Prevention Template
      • About Data Loss Prevention Policies
        • Enabling Real-time Data Loss Prevention
        • Global Settings
        • Configuring a Data Loss Prevention Policy
          • Selecting Accounts
          • Configuring DLP Targets
          • Configuring DLP Actions
          • Configuring DLP Notifications
          • Enabling a DLP Policy
    • Configuring Spam Prevention
      • About Spam Prevention
        • Spam Folder Configuration
      • About Email Reputation
        • Trend Micro Email Reputation Standard
        • Trend Micro Email Reputation Advanced
        • Enabling Email Reputation
        • Configuring Email Reputation Targets
        • Configuring Email Reputation Actions
      • About Content Scanning
        • Spam Engine and Spam Pattern Files
        • End User Quarantine
        • Approved and Blocked Sender Lists
        • Spam Filter
        • New Spam Sources
        • Enabling Content Scanning
        • Configuring Content Scanning Targets
        • Configuring Content Scanning Actions
    • Configuring Advanced Spam Prevention
      • About Advanced Spam Prevention
        • About Business Email Compromise
        • About Writing Style Verification in ScanMail
      • Configuring Advanced Spam Prevention Settings
        • Enabling Advanced Spam Prevention
        • Configuring Advanced Spam Prevention Scan Targets
        • Configuring Advanced Spam Prevention Scan Actions
        • Configuring Advanced Spam Prevention Scan Notifications
      • Configuring Writing Style Training Settings
        • Performing Writing Style Manual Training
        • Configuring Writing Style Regular Training Settings
      • Configuring Writing Style Verification Settings
        • Enabling Writing Style Verification
        • Configuring Writing Style Verification Settings
    • Configuring Web Reputation
      • About Web Reputation Services
        • Command & Control Contact Alert Services
      • Configuring the Web Reputation Scan Service
      • Enabling Web Reputation
      • Configuring Web Reputation Targets
      • Configuring Web Reputation Actions
      • Configuring Web Reputation Notifications
    • Configuring URL Time-of-Click Protection
      • About URL Time-of-Click Protection
      • Enabling URL Time-of-Click Protection
      • Configuring URL Time-of-Click Protection
    • Configuring Search & Destroy
      • About Search & Destroy
      • Configuring Search & Destroy Access Accounts
      • Activating Search & Destroy
      • About Mailbox Searches
        • Syntax Used for Keyword Strings
        • Mailbox Search Options
      • Configuring a Mailbox Search
        • Modifying a Mailbox Search
        • Deleting a Mailbox Search
        • Viewing Mailbox Search Results
      • Configuring Search & Destroy Settings
      • Viewing Search & Destroy Event Logs
      • Troubleshooting Search & Destroy
    • Configuring Virtual Analyzer
      • About Virtual Analyzer
      • Configuring Virtual Analyzer Settings
  • Managing ScanMail
    • Managing the Quarantine Area
      • About the Quarantine
      • Configuring the Quarantine Folder/Directory
      • Performing a Quarantine Query
      • Scheduling Automatic Quarantine Maintenance
      • Manually Performing Quarantine Maintenance
      • Resending Quarantined Messages
    • Monitoring ScanMail
      • Viewing the Summary Screen
        • Summary: System
        • Summary: Security Risks
        • Summary: Spam
        • Summary: Ransomware
      • About Alerts
        • System Events
        • Outbreak Alerts
        • Alert Notification Settings
      • About Reports
        • One-time Reports
          • Generating One-time Reports
        • Scheduled Reports
          • Generating Scheduled Reports
        • Report Maintenance
      • About Logs
        • Types of Logs
        • Querying Logs
        • Log Maintenance
          • Performing Manual Log Maintenance
          • Performing Scheduled Log Maintenance
          • Configuring Log Forwarding Settings
    • Performing Administrative Tasks
      • Configuring Proxy Settings
      • Configuring Global Approved List
      • Configuring Mail Settings
      • Global Notification Settings
        • Configuring Global Notification Settings
      • Configuring Spam Maintenance
      • About Access Control
        • Access Control Permissions
        • Enabling Access Control
        • Configuring Access Control
      • About Special Groups
        • Configuring Special Groups
      • About Server Groups
        • Configuring Server Groups
      • About Internal Domains
        • Configuring Internal Domains
      • Product License
      • About Trend Micro Apex Central
        • About Trend Micro Management Communication Protocol
        • Using ScanMail with Apex Central
        • Registering to Apex Central or Control Manager
        • Unregistering ScanMail from Apex Central
      • Using ScanMail with Deep Discovery Director
      • Configuring FIPS Settings
      • Using Trend Support / System Debugger
    • Integrating with Cloud App Security
      • About Cloud App Security Integration Feature
      • Prerequisites for Cloud App Security Integration
      • Registering a ScanMail Server to Cloud App Security
      • Viewing Policy Violation Logs on the Cloud App Security Management Console
      • Managing Quarantined Email Messages on the Cloud App Security Management Console
      • Unregistering a ScanMail Server from Cloud App Security
      • Deleting the Registration Token
    • Integrating with Trend Vision One
      • Integrating ScanMail with Trend Vision One
      • Unregistering ScanMail from Trend Vision One
  • Getting Help
    • Understanding Security Risks
      • Understanding the Terms
      • About Internet Security Risks
        • Viruses/Malware
          • Virus/Malware Writers
          • Malware Naming
        • Compressed Files
        • Joke Programs
        • Macro Viruses/Malware
        • Mass-Mailing Attacks
        • Trojan Horse Programs
        • Worms
        • Zip of Death
      • About Spyware/Grayware
        • Potential Risks and Threats
          • How Spyware/Grayware Gets into your Network
        • Encoding Types
        • Multipurpose Internet Mail Extensions (MIME) Types
        • True File Type
        • Disease Vector
        • Phish
    • Frequently Asked Questions
      • Scanning and Updating
        • Do I have the latest pattern file or Service Pack?
          • Locating the ScanMail Version
        • Where can I find the latest patches for updating ScanMail?
      • Expressions and Keywords
        • What are regular expressions?
        • How do I use keywords?
        • How do I use operators with keywords?
      • File Handling
        • How do I handle large files?
        • What is a compression ratio?
        • How do I calculate the size of a decompressed file?
      • Quarantine and Log Management
        • Are UNC paths supported for quarantine and backup folders?
        • Are mapped network drives supported for quarantine and backup folders?
        • How does ScanMail display the "Scan Time" or "Delivery Time" for remote servers?
        • How does ScanMail generate centralized report data for multiple servers?
        • Does the ScanMail web service port need to be added to the firewall port exception list before generating centralized logs or quarantine queries?
        • Can I re-create the End User Quarantine spam folder after deleting it?
        • How to cleanup ScanMail email messages that were temporarily quarantined for advanced threat analysis?
      • Logs, Quarantine Records, and Server Groups
        • How do I increase number of query results for each remote server?
        • How do I update newly installed ScanMail servers to the Server Groups list?
      • Logging On and Registration
        • Where can I find my Activation Code and Registration Key?
        • What if the remote SQL server database account password is changed?
        • What if the remote Windows authentication database account password is changed?
      • Security Threats
        • What is spyware/grayware?
        • What are phish attacks?
        • What is the EICAR test virus?
        • What are false positives?
        • Are some files dangerous?
        • How do I send Trend Micro suspected Internet threats?
        • How do I send Trend Micro detected viruses?
      • Virtual Analyzer
        • What are different working modes in Virtual Analyzer and which one should I choose?
        • If ScanMail is integrated with Virtual Analyzer, can I install the latest version of ScanMail along with an older version?
    • Troubleshooting
      • Updating the Scan Engine Manually
      • Updating the Pattern File (lpt$vpn.xxx) Manually
      • Known Issues
    • Technical support
      • Troubleshooting resources
        • Using the support portal
        • Threat encyclopedia
      • Contacting Trend Micro
        • Speeding up the support call
      • Sending suspicious content to Trend Micro
        • Email Reputation Services
        • File Reputation Services
        • Web Reputation Services
      • Other resources
        • Download center
  • ScanMail Windows Event Log Codes
  • Best Practices
    • Set Up Account for Installation with Microsoft Windows Authentication
    • Attachment Blocking Policies
      • Exception Rule Replication
      • Sample Usage Scenarios
    • Content Filtering Active Directory Integrated Policies
      • Content Filtering Policy Replication
    • Data Loss Prevention Policies
      • Data Identifiers and Template Creation
      • Data Loss Prevention Policy Replication
      • Data Loss Prevention: Hidden Keys
    • Optimizing Web Reputation
      • Troubleshooting Web Reputation Performance Issues
    • Search & Destroy Best Practices
      • Search & Destroy Prerequisites
      • Using Search & Destroy in Mixed Exchange Environments
        • Preparing Exchange Server 2016/2019 for Mixed Exchange Environments
      • Configuring Search & Destroy in a Multiple Data Center Environment
      • Optimizing Search Criteria
      • Optimizing Mailbox Searches
      • Deleting Mailbox Searches
      • Exchange Management Shell Commands
        • Service Account Settings
        • Discovery Mailbox Settings
        • Backend Search Tasks
    • Virtual Analyzer - Integration Pre-requisites
    • Internal Domains
    • Recommended Settings
Close