Views:

After adding a domain, perform required configurations to finish provisioning the domain. On the Domains screen, any domain missing required configurations is in the "Configuration required" status, and a red exclamation mark will be shown next to the field that requires your operation or reports any problem. You can hover over the exclamation mark to view the detailed error message.

After you finish all required operations, the status of the domain will change from "Configuration required" into "Completed."

  1. In the General section, verify your domain.
    1. Add the TXT record provided on the console to your domain's DNS configuration to prove that you own the domain.
    2. Click Verify.

      The message "Domain verified" appears if the domain verification is successful.

    If your domain dose not pass verification, the built-in policy rule "Global Anti-Virus Rule (Enforced on Unverified Domains)" will be forcibly applied to incoming messages sent to the domain.

    If you have difficulty adding the TXT record, you can add an MX record for your domain instead:

    Add an MX record for the Trend Micro Email Security server with the highest preference value.

    • North America, Latin America and Asia Pacific:

      <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger = <company_identifier>.in.tmes.trendmicro.com

    • Europe and Africa:

      <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger = <company_identifier>.in.tmes.trendmicro.eu

    • Australia and New Zealand:

      <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger = <company_identifier>.in.tmes-anz.trendmicro.com

    • Japan:

      <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger = <company_identifier>.in.tmems-jp.trendmicro.com

    • Singapore:

      <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger = <company_identifier>.in.tmes-sg.trendmicro.com

    • India:

      <your_domain> MX preference = 20, mail exchanger =<your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger =<company_identifier>.in.tmes-in.trendmicro.com

    • Middle East (UAE):

      <your_domain> MX preference = 20, mail exchanger =<your_domain_mta>

      <your_domain> MX preference = 32767, mail exchanger =<company_identifier>.in.tmes-uae.trendmicro.com

    Note:

    In the preceding MX record, the second preference value 32767 is only used as an example. When setting the second preference value, make sure it is larger than the first preference value, which means this route has lower priority than the first one.

    To learn more about MX records, see About MX Records and Trend Micro Email Security.

  2. In the Inbound Servers section, complete the following configurations:
    1. Configure your firewall to accept email messages from the following Trend Micro Email Security IP addresses or CIDR blocks:

      • North America, Latin America and Asia Pacific:

        18.208.22.64/26

        18.208.22.128/25

        18.188.9.192/26

        18.188.239.128/26

      • Europe and Africa:

        18.185.115.0/25

        18.185.115.128/26

        34.253.238.128/26

        34.253.238.192/26

      • Australia and New Zealand:

        13.238.202.0/25

        13.238.202.128/26

      • Japan:

        18.176.203.128/26

        18.176.203.192/26

        18.177.156.0/26

        18.177.156.64/26

      • Singapore:

        13.213.174.128/25

        13.213.220.0/26

      • India:

        3.110.59.128/25

        3.110.71.192/26

      • Middle East (UAE):

        3.29.202.0/25

        3.29.194.192/26

      Note:

      If you are using a third-party IP reputation service, add the preceding Trend Micro Email Security IP addresses or CIDR blocks to the approved list of the IP reputation service, or disable the third-party service and enable Trend Micro Email Security to perform IP reputation-based filtering for you.

    2. Click Test Connection.
    3. Point the MX record of your domain to the Trend Micro Email Security server with the lowest preference value.

      • North America, Latin America and Asia Pacific:

        <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger = <company_identifier>.in.tmes.trendmicro.com

      • Europe and Africa:

        <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger = <company_identifier>.in.tmes.trendmicro.eu

      • Australia and New Zealand:

        <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger = <company_identifier>.in.tmes-anz.trendmicro.com

      • Japan:

        <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger = <company_identifier>.in.tmems-jp.trendmicro.com

      • Singapore:

        <your_domain> MX preference = 20, mail exchanger = <your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger = <company_identifier>.in.tmes-sg.trendmicro.com

      • India:

        <your_domain> MX preference = 20, mail exchanger =<your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger =<company_identifier>.in.tmes-in.trendmicro.com

      • Middle East (UAE):

        <your_domain> MX preference = 20, mail exchanger =<your_domain_mta>

        <your_domain> MX preference = 10, mail exchanger =<company_identifier>.in.tmes-uae.trendmicro.com

      To learn more about MX records, see About MX Records and Trend Micro Email Security.

    4. Click Verify to verify the inbound servers you added.

      The message "Inbound servers verified" appears if the inbound server verification is successful.

    5. Type an email address next to Send test message to to verify that messages are being delivered from Trend Micro Email Security.
  3. In the Outbound Servers section, complete the following configurations:
    1. If your domain has SPF records, make sure the SPF record under the Outbound Servers section is also included.

      For details about adding SPF records, see Adding SPF Records.

    2. Click Verify.
    3. Route your outbound mail server to the following Trend Micro Email Security MTA for your region:

      • North America, Latin America and Asia Pacific:

        <company_identifier>.relay.tmes.trendmicro.com

      • Europe and Africa:

        <company_identifier>.relay.tmes.trendmicro.eu

      • Australia and New Zealand:

        <company_identifier>.relay.tmes-anz.trendmicro.com

      • Japan:

        <company_identifier>.relay.tmems-jp.trendmicro.com

      • Singapore:

        <company_identifier>.relay.tmes-sg.trendmicro.com

      • India:

        <company_identifier>.relay.tmes-in.trendmicro.com

      • Middle East (UAE):

        <company_identifier>.relay.tmes-uae.trendmicro.com

  4. If you currently use Office 365, configure Office 365 connectors to allow email traffic to or from Trend Micro Email Security MTAs.

    See Adding Office 365 Inbound Connectors.

    See Adding Office 365 Outbound Connectors.

Parent topic: Managing Domains