OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

Trend Micro OfficeScan 10.6 Administrator’s Guide
9-48
You can define monitored and non-monitored internal email domains.
• Monitored email domains: When OfficeScan detects email transmitted to a
monitored domain, it checks the action for the policy. Depending on the action, the
transmission is allowed or blocked.
Note: If you select email clients as a monitored channel, an email must match a policy
for it to be monitored. In contrast, an email sent to monitored email domains is
automatically monitored, even if it does not match a policy.
• Non-monitored email domains: OfficeScan immediately allows the transmission
of emails sent to non-monitored domains.
Note: Data transmissions to non-monitored email domains and to monitored email
domains where "Pass" is the action are similar in that the transmission is allowed.
The only difference is that for non-monitored email domains, OfficeScan does
not log the transmission, whereas for monitored email domains, the transmission
is always logged.
Specify domains using any of the following formats, separating multiple domains with
commas:
• X400 format, such as /O=Trend/OU=USA, /O=Trend/OU=China
• Email domains, such as example.com
For emails sent through the SMTP protocol, OfficeScan checks if the target SMTP
server is on the following lists:
1. Monitored targets
2. Non-monitored targets
Note: For details about monitored and non-monitored targets, see Transmission Scope and
Targets for Network Channels on page 9-51.
3. Monitored email domains
4. Non-monitored email domains