Configuring Suspicious Object Settings

Before you start, make sure you meet the following requirements:

  • You have integrated Trend Micro Email Security with Trend Vision One.

    Note:

    To integrate, go to Point Product Connection > Product Connector in Trend Vision One console.

  • You have enabled virus policies. Suspicious file SHA-1/SHA-256 hashes apply during virus scanning.

  • You have enabled spam policies with Web Reputation turned on. Suspicious URLs apply during Web Reputation scanning.

  1. Go to Administration > Other Settings > Service Integration (Administration > Service Integration in the old console).
  2. Click Trend Vision One.
  3. Enable Check for suspicious files and URLs.

    For files or URLs that match the suspicious objects from both Trend Vision One and Apex Central, the settings for the suspicious objects from Trend Vision One take precedence.

  4. Enable Check for suspicious sender addresses.

    Trend Micro Email Security synchronizes only the sender addresses configured with the “Block/Quarantine” action in Trend Vision One and blocks messages from these senders.

  5. Under Security Level for Files, specify the security level to determine whether to take actions on messages when suspicious files are detected during virus scanning.

    The actions to take are synchronized from Trend Vision One along with the suspicious objects.

  6. For Security Level for URLs, make sure your specify the security level for Web Reputation in your spam policy to determine whether to take actions on messages when suspicious URLs are detected during spam scanning.

    The actions to take are synchronized from Trend Vision One along with the suspicious objects.

  7. Check additional information about suspicious object synchronization from Trend Vision One.
  8. Click Save.
Parent topic: Trend Vision One