What's New

More Granular True File Type Detection for Microsoft Office Files

Trend Micro Email Security allows you to separately control true file type detection for Microsoft Office 97-2003 files (such as .doc, .ppt, .xls) and Microsoft Office files of later versions (such as .docx, .pptx, .xlsx).

For details, see Using Attachment True File Type Criteria.

Reverse DNS Validation

Trend Micro Email Security supports reverse DNS validation at the connection setup stage by performing PTR record lookup based on the email sending IP address. Besides, administrators can configure a list of blocked PTR domains to directly reject email messages from them.

For details, see Managing Reverse DNS Validation.

Sender Filter Enhancement

Trend Micro Email Security redesigned the Sender Filter feature under Inbound Protection by providing the following enhancements:

• Supporting more wildcard formats in approved or blocked sender addresses.

• Allowing you to apply approved or blocked senders to all recipients in your organization.

• Synchronizing approved or blocked sender lists between the administrator console and End User Console so that administrators can manage the approved or blocked senders added from the End User Console or quarantine digest mails.

For details, see Managing Sender Filter.

New Account Type: Superadmin Account

Trend Micro Email Security introduces a new local account type, namely superadmin account, to ease the administrative burden of the Trend Micro Business Account. Superadmin accounts have all administrative permissions inherited from the Business Account and can perform actions on behalf of the Business Account when necessary.

For details, see Account Management.

Support for Attaching the Original Message in Notifications for All Policy Violation Detections

In addition to writing style analysis detection, Trend Micro Email Security provides an option to attach the original message in notifications for all policy violation detections.

For details, see Managing Notifications.

Mail Tracking Log Enhancement

For deleted or delivered quarantined messages, Trend Micro Email Security enables you to check from mail tracking logs who took the action and the time when the action was completed.

Log Export Enhancement

Trend Micro Email Security now can export all queried mail tracking logs and policy event logs to CSV files from the log result page.

For details, see Understanding Mail Tracking and Understanding Policy Events.

IP-based Control of Access to Trend Micro Email Security

IP-based access control is available to restrict access to Trend Micro Email Security. With this feature enabled, Trend Micro Email Security verifies the IP address from which the access request originates, and takes the preconfigured actions if the request originates from an unapproved IP address.

For details, see Logon Access Control.

Quarantine Digest Template Enhancement

Trend Micro Email Security enhances its quarantine digest template by refining template text and providing a new token for your use.

For details, see Adding or Editing a Digest Template.

Support for Authenticated Received Chain (ARC)

Trend Micro Email Security adds support for ARC in DMARC authentication. If ARC is enabled and an ARC chain is present and validated, some legitimate messages that fail DMARC authentication due to intermediate processing will pass the authentication.

For details, see Domain-based Message Authentication, Reporting & Conformance (DMARC).

Policy Event Log Enhancement

Trend Micro Email Security enhances its policy event logs by providing more details about Virtual Analyzer scan exceptions.

Email Attachment Sanitizing

Trend Micro Email Security supports email attachment sanitizing for both incoming and outgoing messages. When configuring a content filtering policy, you can choose whether to set actions specifically for email messages that contain active content such as macros in Microsoft Office attachments.

For details, see Sanitizing Attachments.

Layout Optimization for Quarantine Digest Notifications

Trend Micro Email Security is optimized to make the layout for quarantine digest notifications more mobile-friendly.

Stamp Enhancement

Trend Micro Email Security further supports HTML stamps besides already supported plain text stamps. You can customize HTML stamps based on predefined styles, and view an automatic plain text version of the customized stamps in real time.

For details, see Managing Stamps.

Quarantined Message Management Enhancement

Trend Micro Email Security allows you to configure settings for end users to view quarantined messages and take action on the End User Console and in the quarantine digest notifications. In addition, quarantined message query is optimized to provide a reasonable and consistent user experience.

For details, see Configuring End User Quarantine Settings.

Support for Wildcard Domain in Address Groups

Trend Micro Email Security supports wildcard domains for email addresses in hybrid address groups. In addition, when you search for address groups by email address, wildcard search is used instead of partial search.

For details, see Managing Address Groups.

Keyword Expression Test Support

Trend Micro Email Security now enables you to test the keyword expression functionality when you add a new keyword expression.

For details, see Adding Keyword Expressions

Log Search Enhancement

Trend Micro Email Security enhances its log search feature by allowing you to search mail tracking logs by sender IP address and destination IP address.

For details, see Understanding Mail Tracking.

Keyword Expression Enhancement

Trend Micro Email Security is enhanced to add another match condition to the Keywords and Expressions feature under Administration > Policy Objects. With this enhancement, Trend Micro Email Security will trigger actions when the combined score of all matched keyword expressions reaches the specified threshold.

For details, see Adding Keyword Expressions.

Redirect Page Customization Support for Time-of-Click Protection

Trend Micro Email Security enhances Time-of-Click Protection settings by allowing you to customize redirect pages for suspicious, dangerous, and untested URLs in inbound messages. The redirect page customization settings apply to incoming messages of the entire organization.

For details, see Configuring Time-of-Click Protection Settings.

High Profile Domains

Trend Micro Email Security allows you to add high profile domains, for example, your partners' domains or domains of famous brands, to leverage the improved Trend Micro Antispam Engine to detect cousin domains. A cousin domain looks deceptively similar to a legitimate target domain and is often used in phishing attacks to steal sensitive or confidential information from users.

For details, see High Profile Domains.

Renaming from "Business Email Compromise (BEC)" to "High Profile Users"

With the launch of the High Profile Domains feature, Trend Micro Email Security renames the Business Email Compromise (BEC) menu under Inbound Protection to High Profile Users to provide a more accurate description of the feature.

Support for Enabling/Disabling Log Retrieval

Trend Micro Email Security allows you to decide whether to retrieve policy event logs and mail tracking logs via REST APIs for third-party SIEM application integration.

For details, see Log Retrieval.

File Password Analysis Result Visibility in Mail Tracking Logs

Trend Micro Email Security shows the password analysis result of email attachments in mail tracking logs.

Support for %HEADERS%

Trend Micro Email Security now supports the %HEADERS% token, which will be replaced with message headers in stamps and notification body.

DNS-Based Authentication of Named Entities (DANE) Support for Outgoing TLS Connections

Trend Micro Email Security now supports DANE for outgoing TLS connections.

For details, see Transport Layer Security (TLS) Peers.

SPF Action Enhancement

For details, see Adding SPF Settings.

License Information Optimization

Trend Micro Email Security is optimized to show all the licenses that you have purchased under Administration > License Information. In addition, a grace end date is provided in the license information.

Organization-Level Policy

Trend Micro Email Security is enhanced to allow you to create inbound and outbound protection policies at the organization level. These policies automatically apply to all domains in your organization including the new ones added in the future. Organization-level policies make policy management easier than otherwise.

For details, see Configuring Policies.

Predictive Machine Learning Support in Outbound Protection

Trend Micro Email Security adds support for Predictive Machine Learning in outbound protection, allowing you to specify Predictive Machine Learning settings in virus scan rules.

Syslog Enhancement

In addition to detection logs, audit logs and mail tracking logs, Trend Micro Email Security can now forward URL click tracking logs to syslog servers.

Quarantine Digest Template Enhancement

For details, see Adding or Editing a Digest Template.

Log Search Enhancement

Trend Micro Email Security enhances its log search feature by allowing you to search policy event logs by message header address and threat name, and search mail tracking logs by message header address.

For details, see Understanding Mail Tracking and Understanding Policy Events.