Safelisting in Trend Micro – Support Center

This article shows you how to safelist (whitelist) Portal's domain in Trend Micro so that our training notifications and simulated phishing emails can get through to your targets (end users). If you run into issues safelisting Portal in Trend Micro services, we suggest that you reach out to Trend Micro for assistance. You may also get in touch with our Portal customer support.

Safelisting Domains in Trend Micro

The instructions in the below 5 sections must all be completed to successfully safelist Portal in Trend Micro.

Enabling Advanced Spam Protection

Go to Advanced Threat Protection tab > Add.
Select the appropriate policy to create (Box, Google, Dropbox, Sharepoint, Exchange, OneDrive).
Click on Advanced Spam Protection (located on the left).
Checkmark the Enable Advanced Spam Protection option.
Open the Approved/Blocked Sender List.
Check the box next to the Enable the approved sender list option.
Type *phishingbox.com in the text field and click on Add >.
Go to the Rules Configuration section.
Select Incoming Messages from the Apply to drop-down.
Select Medium for the Detection Level.

Enabling Malware Scanning

Select Malware Scanning (on the left of the screen).
Go to the Rules section.
Select All messages from the Apply to drop-down.
In the Malware Scanning section, select Scan all files, Scan message body, and Enable IntelliTrap.
Go to the Action section.
Beside Action:, select the Trend Micro recommend actions
Beside Notification:, select the Notify option.

Enabling File Blocking

Go to File Blocking (on the left of the screen).

NOTE: we suggest that you keep File Blocking turned on because you can’t limit this option to Portal messages. If you turn File Blocking off, it could potentially allow malicious email attachments through to your targets.

Enabling Web Reputation

Go to Web Reputation (on the left of the screen).
Check the Enable Web Reputation option at the top.
Open the Rules section.
Select All messages from the Apply to: drop-down.
Choose the Medium option beside Security Level.
Open the Approved/Blocked URL List section.
Check the box that says Enable the approved URL list.
Check the Add internal domains to the approved URL list option.
Enter Portal’s hostnames in the text field. For a complete list of our hostnames, see this article.
Click on Add >.

Enabling Virtual Analyzer

Go to Virtual Analyzer (on the left).
Check the option that says Enable Virtual Analyzer.
Finally, click on Save.

When you have completed all the above steps, you should see your new policy under the Advanced Threat Protection tab.