Web Reputation helps prevent access to URLs on the web or embedded in email messages that pose security risks. Web Reputation checks the URL’s reputation against the Trend Micro web reputation servers and then correlates the reputation with the specific web reputation policy enforced on the client. Depending on the policy in use:
The Security Agent will block or allow access to the website.
The Messaging Security Agent (Advanced only) will quarantine, delete, or tag the email message containing malicious URLs, or allow the message to be sent if the URLs are safe.
Web Reputation provides both email notification to the administrator and online notification to the user for detections.
For Security Agents, configure a different level of security based on the location (In Office/Out of Office) of the client.
If Web Reputation blocks a URL and you feel the URL is safe, add the URL to the Approved URLs list.
To save network bandwidth, Trend Micro recommends adding the enterprise internal websites to the Web reputation approved URL list.
Reputation Score
A URL's “reputation score” determines whether it is a web threat or not. Trend Micro calculates the score using proprietary metrics.
Trend Micro considers a URL a web threat if its score falls within a defined threshold, and safe if its score exceeds the threshold.
A Security Agent has three security levels that determine whether it will allow or block access to a URL.
High: Blocks pages that are:
Dangerous: Verified to be fraudulent or known sources of threats
Highly suspicious: Suspected to be fraudulent or possible sources of threats
Suspicious: Associated with spam or possibly compromised
Untested: While Trend Micro actively tests web pages for safety, users may encounter untested pages when visiting new or less popular websites. Blocking access to untested pages can improve safety but can also prevent access to safe pages.
Medium: Blocks pages that are:
Dangerous: Verified to be fraudulent or known sources of threats
Highly suspicious: Suspected to be fraudulent or possible sources of threats
Low: Blocks pages that are:
Dangerous: Verified to be fraudulent or known sources of threats