Views:
All settings in IMSS or IMSVA will be migrated to Trend Micro Email Security completely or partially except those listed in Data that will not be migrated. Among the settings that are partially migrated, some are modified to adapt to Trend Micro Email Security due to the feature differences between IMSS or IMSVA and Trend Micro Email Security. Therefore, you need to confirm or fix these settings according to the on-screen instructions after migration.
The following table lists some examples of the settings that will be partially migrated and describes the feature differences.
Note
Note
For details about all the settings that are completely or partially migrated, see the data migration report downloaded from the Trend Micro Email Security administrator console when the migration completes.
Navigation in IMSS or IMSVA
Source Settings
 Navigation in Trend Micro Email Security
Destination Settings
Feature Differences
Policy → Policy List
The following settings on the Step 1: Select Recipients and Senders screen:
  • Sender
  • Recipient
  • Sender to recipient exception
The following submenus under the Inbound Protection and Outbound Protection menus:
  • Virus Scan
  • Spam Filtering
  • Content Filtering
  • Data Loss Prevention → Data Loss Prevention (DLP) Policy
The following settings in the Senders section of the Recipients and Senders tab:
  • Sender
  • Recipient
  • Sender to recipient exception
LDAP users in IMSS or MISVA are migrated as static email addresses in Trend Micro Email Security.
Condition match settings on the Step 2: Select Scanning Conditions screen
  • Inbound Protection → Content Filtering
  • Outbound Protection → Content Filtering
 Condition match settings in the Advanced section of the Scanning Criteria tab
Only content filtering supports all condition matched (AND).
True file type settings in the Attachment section of the Step 2: Select Scanning Conditions screen
  • Inbound Protection → Content Filtering
  • Outbound Protection → Content Filtering
True file type settings in the Advanced section of the Scanning Criteria tab
Trend Micro Email Security does not support MSI, PNG, 7-Zip, or Microsoft Windows shortcuts.
Global DKIM Enforcement rule
Inbound Protection → Domain-based Authentication → DomainKeys Identified Mail (DKIM) Verification
Settings in the Default (for unspecified domains) policy (including the action and Enforced Peers)
Trend Micro Email Security uses both the header sender address and envelope sender address instead of only the header sender address for matching the list of enforced peers.
Policy → Approved List
The settings of the following approved lists:
  • DKIM approved list
  • Web reputation approved list
  • URL keyword list
  • Inbound Protection → Domain-based Authentication → DomainKeys Identified Mail (DKIM) Verification
  • Administration → Policy Objects → Web Reputation Approved List
  • Administration → Policy Objects → URL Keyword Exception List
The settings of the following approved lists:
  • DKIM approved list (Ignored Peers section in the Default (for unspecified domains) policy)
  • Web reputation approved list
  • URL keyword exception list
Trend Micro Email Security uses the envelope sender address instead of the header sender address for matching the list of ignored peers.
Policy → Policy Objects → Address Groups
Name and address settings of an address group
Administration → Policy Objects → Address Groups
Name and address settings of an address group
Trend Micro Email Security supports wildcard domains (for example, *@*.example.com) in hybrid address groups, and does not support wildcard domains in internal address groups.
If an address group is used as senders (or sender exceptions) in outbound policies or recipients (or recipient exceptions) in inbound policies and the group contains email addresses from unmanaged domains, Trend Micro Email Security will create a copy of the address group, delete those email addresses from the copy, and suffix the copy name with " - internal".
Policy → Policy Objects → Keywords & Expressions
Match settings of a keyword or expression
Administration → Policy Objects → Keywords and Expressions
Match settings of a keyword or expression
None
Policy → Policy Objects → Policy Notification
Variables list in the settings of a policy notification
Administration → Policy Objects → Notification
Variables list in the settings of a policy notification
Trend Micro Email Security does not support the following variables:
  • %RULETYPE%
  • %ENTITY%
  • %QUARANTINE_PATH%
  • %QUARANTINE_AREA%
  • %PROTOCOL%
  • %HOSTNAME%
  • %MAILCHARSET%
  • %SUSPICIOUS_URL%
Sender Filtering → Approved List
The following settings of an approved list:
  • IP addresses
  • Groups of computers
Note
Note
Trend Micro Email Security migrates IP addresses and groups of computers from IMSVA only if the Email Reputation and IP Profiler check box to the right of Apply to is selected. This restriction does not apply to IMSS.
Inbound Protection → Connection Filtering → IP Reputation → Approved IP Addresses
IP address settings in the IP addresses section
Trend Micro Email Security does not support the following settings:
  • IP addresses resolved from domains
  • Private IP addresses
  • IP addresses in disabled approved lists
Sender Filtering → Blocked List
The following settings of a blocked list:
  • IP addresses
  • Groups of computers
Note
Note
Trend Micro Email Security migrates only IP addresses and groups of computers whose Action is Block Permanently.
Inbound Protection → Connection FilteringIP Reputation → Blocked IP Addresses
IP address settings in the IP addresses section
Trend Micro Email Security does not support the following settings:
  • IP addresses resolved from domains
  • Private IP addresses
  • IP addresses in disabled blocked lists
Sender Filtering → DMARC
DMARC settings
Note
Note
DMARC settings are available only in IMSVA.
Inbound Protection → Domain-based Authentication → Domain-based Message Authentication, Reporting and Conformance (DMARC)
DMARC settings
Trend Micro Email Security uses both the header sender address and envelope sender address instead of only the header sender address for matching the list of enforced peers.
Administration → IMSVA Configuration → DKIM Signature
Advanced settings of DKIM signatures
Note
Note
DKIM signatures are available only in IMSVA.
Outbound Protection → Domain-based Authentication → DomainKeys Identified Mail (DKIM) Signing
Advanced settings of DKIM signatures
Trend Micro Email Security does not support exempt domains.