Trend Micro InterScan M Series, Administrator'S Manual

Page: 70 / 480

Trend Micro™ InterScan™ Gateway Security Appliance M-Series Administrator’s Guide
3
-
10
InterScan Gateway Security Appliance does not support wildcard matching on the
username part. However, if you type a pattern such as “*@trend.com”, InterScan
Gateway Security Appliance still treats it as “@trend.com”. This feature applies to
the user-defined Approved Senders and Blocked Senders.
Using the Keyword Exception List
Use the Keyword Exception list as a way to reduce the chances that the spam engine
and pattern file might classify legitimate email as spam.
Use the Web console to set up a list of keywords to control how InterScan Gateway
Security Appliance filters email messages.
InterScan Gateway Security Appliance scans the email message body. If the message
body contains a word from the Keyword Exception list, InterScan Gateway Security
Appliance classifies the message as legitimate email.
Using Email Reputation Services
Anti-Spam Email Reputation Services (ERS) is part of the InterScan Gateway Secu-
rity Appliance anti-spam solution. If enabled, ERS can effectively block up to 80% of
spam at its source. ERS uses the Standard Reputation database (previously called the
Real-Time Blackhole List or RBL) and the Dynamic Reputation database (previously
called Quick IP List or QIL) to identify spam sources. ERS blocks spam at its source
by validating the IP address of the SMTP server sending the inbound mail to a list of
IP addresses in the Standard Reputation and Dynamic Reputation databases.
T
ABLE
3-3. Standard Reputation and Dynamic Reputation databases
ERS database Description
Standard Reputa-
tion Standard Reputation is a database that contains the IP
addresses of SMTP servers that originate spam or that ERS
considers spam open-relay hosts. InterScan Gateway Secu-
rity Appliance categorizes the IP addresses listed in the Stan-
dard Reputation database as permanent sources of spam.
Dynamic Reputation Dynamic Reputation is a database that contains the IP
addresses of SMTP servers that either originate spam or that
ERS considers spam open-relay hosts. InterScan Gateway
Security Appliance categorizes the IP addresses listed in the
Dynamic Reputation database as impermanent sources of
spam. The IP addresses in this list change frequently.