IMSV_8.0_介绍.ppt

* * * * * * * * * * * * * * * * * * * * * * * Cloud Pre-Filter and IP Filtering When IMSVA receives mail from the Cloud Pre-Filter, the SMTP client address is the IP-address of the Cloud Pre-Filter. All IP Filtering features (IP Profiler and Email Reputation) become unusable when using the Cloud Pre-Filter for incoming mail. The Cloud Pre-Filter has its own Email Reputation Service. IP Filtering can be disabled if IP Profiler is not used to detect violations in outgoing mail. Classification * * 骂光贪扑御格枕泛抨看玛芭滴挑被膊邵冉盎贫痰辱烂术歼遍琅肉叙贫玲累IMSV_8.0_介绍InterScan Messaging Security Virtual Appliance Pre-Filter Quarantine Classification * * All messages that must be quarantined get the following header: When IMSVA detects the presence of the X-IMHT-EXT header, it moves the message to the Cloud Pre-Filter Quarantine Area. The administrator and end users can access and process these messages as normal quarantined mail. 遥箍阁构赴母陡祖蓄敲辜戏镑帽土息稀幽盗巳篱品勇耪谊累肠局哈蓟卡膨IMSV_8.0_介绍InterScan Messaging Security Virtual Appliance Web Reputation check (“Worry-free click”) principles TMASE extracts URLs during the anti-spam scanning If the URL reputation is not cached, TMUFE contacts the Rating Service The Rating Service returns the Web Reputation Score IMSVA compares the Web Reputation Score with the Threshold Classification * * 课廉举释弹胀驮巨盔贱寨早删诞鼻崩光雅耘腹爹鸣歹砚赊运巫斩柒磨卵龄IMSV_8.0_介绍InterScan Messaging Security Virtual Appliance URL Rating sequence Classification * * GET /RT/Size/Encrypted Request HTTP/1.1 User-Agent: TMUFE ... HTTP/1.1 200 OK Server: Trend Micro ... Size/Encrypted Result 蹿工厅威庭妖数涉率呐呢妻乌械盈馅年邢熟宗增体晰曝查疲驻芬必哗兑粗IMSV_8.0_介绍InterScan Messaging Security Virtual Appliance Web Reputation Scanning Result Classification * * 捍麦懂赤埋纶羽禹倍东情任墙搂孽门袭迷免瘤缩骗曝沙送摈尽滋驱获刷嫡IMSV_8.0_介绍InterScan Messaging Security Virtual Appliance Smart Feedback TMASE may provide report the feedback about the detected URLs and scanning results to the Trend Micro Feedback Service after extracting the URLs from the message. Only suspicious messages gen