(833) 300-3908
View Categories

Getting Started with the Email Security End User Console

15 min read

Table of Contents

Getting Started with the End User Console #

Choose the proper way to access the Trend Micro Email Security End User Console.

Table 1. Accessing the Trend Micro Email Security End User Console

Logon Method

Login Information

Single sign-on (SSO)

If your administrator has enabled SSO, ask your administrator for the logon address and log on to the End User Console with your identity provider credentials.

Local account login

Use the following web address for your region to access the End User Console:

On the End User Console, you are allowed to perform any of the following tasks:

  • Manage multiple accounts from different sources.

  • View and manage your quarantined email messages.

  • Enable Email Continuity against email loss.

Web Browser Requirements #

If you have trouble using the site or how the website displays, confirm that you are using a supported browser with JavaScript enabled.

Supported browsers include:

  • Microsoft Internet Explorer 11

  • Microsoft Edge 91

  • Mozilla Firefox 60.0 or later

  • Google Chrome 67.0 or later

The Trend Micro Email Security End User Console supports the following languages. Change the locale in your browse to match your region.

  • English

  • French

  • Spanish

  • German

  • Italian

  • Japanese

  • Portuguese

Registering Your Account #

Tip: To reset your End User Console password, click the Forgot your password link on the login screen.

  1. Access the End User Console.
    North America, Latin America, and Asia Pacific: https://euc.tmes.trendmicro.com/
    Other Locations

    The login screen for the Trend Micro Email Security End-User Console appears.

  2. Click Register a new account.

    The Create a New Account screen appears.

  3. Type the email address associated with the Trend Micro Email Security End User Console.
  4. Type and confirm the new password to be associated with the account.

    Important:     Trend Micro recommends you use a strong password, a long password (up to 32 characters) combining uppercase letters, lowercase letters, numbers, and special characters.
  5. Click Next.

    A verification code is sent to your specified email address.

  6. On the Verify Email Address screen, specify the verification code.
  7. Click Finish.

    You can use the new account to access the End User Console.

Setting Up Two-Factor Authentication #

Note: If your administrator has enforced two-factor authentication, it must be used every time you log on to the End User Console and cannot be disabled. Complete the following steps to set up two-factor authentication before accessing the End User Console.

The Trend Micro Email Security End-User Console provides two-factor authentication support. Two-factor authentication provides an added layer of security for end-user accounts and prevents unauthorized access to your Trend Micro Email Security End User Console, even if your password is stolen.

After enabling two-factor authentication, end-user accounts need to provide the following authentication credentials each time they sign in:

  • Local account and password (already registered on the End User Console)

  • A one-time password is generated by the Google Authenticator app or another TOTP-based Password Manager, such as Bitwarden.

This section describes how to set up two-factor authentication with a local account.

  1. Log into the Trend Micro Email Security End User Console with your local account and password.
  2. Click your account name in the top right corner and choose Two-Factor Authentication to open the setup wizard.
  3. Set up two-factor authentication in the wizard.
    1. Click Get Started.
    2. Verify your email address and click Next.
    3. Obtain the verification code from the notification sent to your email address.

      Note:       If you did not get the verification code, wait at least 3 minutes before clicking Resend Code.
    4. Type the verification code and click Next.
    5. Follow the instructions to set up two-factor authentication.

      1. Download Google Authenticator or another TOTP Authenticator from Apple’s App Store or Google Play and install it on your mobile phone.

      2. Add your Trend Micro Email Security account to Google Authenticator by scanning the QR code.

      3. Provide the 6-digit code generated by Google Authenticator to verify that your authentication works properly.

    6. Click Finish.

      When you try to log on, your account will be presented with the two-factor authentication.

      To disable two-factor authentication, click Disable on the Two-Factor Authentication screen. If your administrator has enforced it, click Reset to reset it if necessary.

Changing Passwords #

Tip: Trend Micro recommends changing the password regularly.
  1. Access the End User Console.
  2. Click your login account name and click Change Password.
  3. Type your current password in the Old password field.
  4. Type and confirm the new password to be associated with the account.

    Important:     Trend Micro recommends you use a strong password, that is, a long password (up to 32 characters) combining uppercase letters, lowercase letters, numbers, and special characters.
  5. Click Save.

Resetting Your Password #

  1. Access the End User Console.

    The login screen for the Trend Micro Email Security End-User Console appears.

  2. Click Forgot your password.

    The Reset Password screen appears.

  3. Type the email address that you used when setting up your account.
  4. Click Send verification code.

    A verification code is sent to the above-specified email address.

  5. Type the verification code.
  6. Type and confirm the new password to be associated with the account.

    Important:

    Trend Micro recommends you use a strong password, a long password (up to 32 characters) combining uppercase letters, lowercase letters, numbers, and special characters.

  7. Click Finish.

    You can use the new password to log into the End User Console.

Managed Accounts #

Using a single account to log on, you can manage multiple Trend Micro Email Security End User Console accounts. In addition, you can perform operations such as viewing quarantined messages, setting approved and blocked senders, and complete Email Continuity settings for each managed account.

Depending on your administrator’s setting, the managed accounts available on the End User Console are collected from either of the following sources:

  • Accounts manually added and bound

  • Aliases synchronized from directories

How you manage your accounts differs according to the source type chosen by your administrator.

  • Manually Added Accounts
  • Aliases Synchronized from Directories

Manually Added Accounts #

If your administrator chooses to use the manually added accounts as the source type, either of the following scenarios will be presented based on your login method:

  • Local account login: Log in using an account you have registered on the End User Console.

    If you have multiple end-user accounts, use the current login account as the primary one and add others as its managed accounts.

  • Single sign-on: log on using your existing identity provider credentials.

    After single sign-on, the email addresses configured by your administrator in claim types for single sign-on will be shown in the Managed Account drop-down list.

Under the first scenario, you can manually add and remove managed accounts.

Manually Adding Managed Accounts #

Important: If you manage an account, that account cannot log on to the End User Console. Remove the account from your managed account list to allow it to log on again.

Before adding a managed account, verify the following:

  • The account is a registered End User Console account.

  • Another End User Console account does not currently manage the account.

  • You can open the confirmation email message sent to the account address. You must have access to the incoming email messages for an account to successfully start managing that account.

  • You have the End User Console password for the account.

  1. Access the End User Console.
  2. Click your login account name and click Managed Accounts.
  3. Click Add.
  4. Specify a registered email address and its password and click OK.
  5. Open the confirmation email message sent to the account address and follow the instructions.

Removing Managed Accounts #

  1. Access the End User Console.
  2. Click your login account name and click Managed Accounts.
  3. Select the check box next to the account to remove.
  4. Click Remove.

Aliases Synchronized from Directories #

An alias is an email address that is associated with another destination email address. It can also be referred to as a virtual or forwarding email address. Aliases are generally configured on a mail server.

If choosing to use the aliases synchronized from directories as the source type, your administrator can complete alias synchronization with the Directory Synchronization Tool. You can specify a primary alias or change the primary alias predefined by your administrator. Either of the following scenarios will be presented based on your login method:

  • Local account login: Log in using an account you have registered on the End User Console.

    All your aliases will be shown in the Managed Account drop-down list once your administrator completes synchronization.

    To set the current logon account as the primary alias:

    1. Make sure the primary alias account has been registered and activated.

    2. Click your account name in the upper-right corner and click Set As the Primary Alias.

    To switch the primary alias, access the End User Console with the desired account and follow the steps above.

  • Single sign-on: log on using your existing identity provider credentials.

    All your aliases will be shown in the Managed Account drop-down list once your administrator completes synchronization. In addition, email addresses configured by your administrator in claim types for single sign-on will be listed.

    You can choose to set one of the aliases as the primary alias.

    1. Click your account name in the upper-right corner and click Set Primary Alias.

    2. In the dialog box, click the alias you want to set as primary and click Save.

If you have set a primary alias on the End User Console, the quarantine digest email messages will be merged into one message and sent only to the primary alias. If you have not set the primary alias, the quarantine digest email messages will be distributed to each email address associated with your current end-user account.

Note: Once you have set the primary alias, it cannot be disabled but can be changed if necessary.

    Quarantined Messages #

    Quarantined messages are blocked as spam or inappropriate content that is detected before delivery to an email account. Messages held in quarantine can be reviewed and manually deleted or delivered.

    Note: The End User Console does not show all quarantined email messages. The quarantined email messages you can view and take action on are determined by your mail administrators’ settings based on quarantine reasons.

    Managing Quarantined Messages #

    Warning: Trend Micro Email Security automatically deletes messages from the quarantine after 30 days.
    1. Access the End User Console.
    2. Go to Quarantine > Quarantine List.
    3. Optionally, specify a Managed Account at the top of the screen.

      Note:       The All managed accounts option includes all managed accounts and your primary account.

      Selecting All managed accounts may substantially increase the time Trend Micro Email Security needs to display the lists of quarantined messages and approved senders. If you manage a large number of accounts, a console time-out may occur. In this case, select each managed account separately and try again.

    4. Optionally, select the number of messages shown on each page.
    5. Optionally, click a sortable column title to sort the list. Click the same title more than once to sort by ascending  or descending  order. Sortable columns include the following:

      • Date: Date and time stamped on the message.

      • Sender: Email address of the sender.

      • Account: Message recipient.

      • Subject: Text of the subject line.

      • Reason: Reason why the message is quarantined.

    6. Do either of the following to select messages to manage:

      • To select one or more messages, select the checkboxes to the left of each entry.

      • To select all messages on the current page, select the check box to the left of the Date column title.

    7. Click one of the following buttons to manage selected messages. Whether the buttons are available is determined by your administrator’s setting.

      •  Delete: Cancel delivery and permanently delete the message

      •  Delete & Block Sender: Permanently delete the message and add the address to the blocked senders of the specified managed account or accounts. Future messages from blocked senders will be blocked.

      •  Deliver: Release from quarantine.

      •  Deliver & Approve Sender: Release the message from quarantine and add the address to the approved senders of the specified managed account or accounts. Future messages from approved senders will not be held in quarantine.

        Note: Released messages are no longer marked as spam, but they will continue to be processed by Trend Micro Email Security. The following conditions apply to delivery:

        • If a message triggers a content-based policy rule with an Intercept action of Quarantine, it will once again appear in the quarantined message list.

        • If a message triggers a content-based policy rule with an Intercept action of Deleting the entire message or Changing the recipient, it will not arrive at its intended destination.

    8. Optionally, click the Date value to view the Quarantine Details screen for a given message.
      1. Check the summary and detailed information about the message.
      2. Click Delete, Delete & Block Sender, Deliver, or Deliver & Approve Sender to manage the message.

    Approved and Blocked Senders #

    Configure the Approved and Blocked Sender lists to manage email addresses that are always allowed or blocked from sending email messages to your address or domain.

    The senders you configure will be visible to your mail administrators. Similarly, the senders configured by the mail administrators for your account can also be synchronized to the End User Console.

    • Approved Senders

      Important: Any messages from senders in the list will not be detected as spam, phishing, or graymail messages. All malware, content-based, and attachment rules the mail administrator sets will still apply.

      Using Trend Micro Email Security, mail administrators can set up rules to take action on email messages based on the threats detected. For example, administrators can remove detected malware from incoming messages before they reach the corporate network or quarantine detected spam and other inappropriate messages. Furthermore, intended message recipients or mail administrators can release or delete the quarantined messages.

      You can set up a list of approved email senders to reduce the number of desirable messages being held in quarantine. Messages from these senders are never quarantined as spam or graymail messages. A sender can be a specific email address or all senders from a domain. Rules for detected spam, phishing, and graymail messages are not applied to messages received from approved senders. However, detected malware in incoming messages is still filtered before they reach your network.

    • Blocked Senders

      Trend Micro Email Security automatically blocks messages sent from email addresses or domains added to the blocked list without submitting the messages to any scanning.

    The Approved Senders and Blocked Senders tables display the following information:

    • Sender: Email address or domain of the sender

    • Recipient: Your managed account

    • Date Added: Date and time that the sender was added to the list

    • Added By: Specifies whether the mail administrators or you added the sender to the list

    Adding Safe Senders #

    Senders can be manually added to the list on the Approved Senders or Blocked Senders screen or automatically added using the Deliver & Approve Sender or Delete & Block Sender button on the Quarantine screen.

    See Managing Quarantined Messages.

    To manually add senders to the list, follow these steps:

    1. Access the End User Console.
    2. Go to Quarantine > Approved Senders or Quarantine > Blocked Senders.
    3. Optionally, specify a Managed Account at the top of the screen.

      Note:

      Selecting the Managed Account of All managed accounts includes all managed accounts and your primary account.

    4. Click Add.
    5. Type a sender in the Sender field in the Add Approved Sender dialog box. A sender can be a specific email address or all addresses from a specific domain or subdomain.

      • Filter a specific email address by typing that email address.

      • Filter all addresses from a domain using an asterisk (*) to the left of the at sign (@) in the email address. For example, *@example.com will filter all email addresses in the example.com domain.

      • Filter all addresses from a subdomain by using an asterisk (*) to the left of the at sign (@) and also using an asterisk (*) in place of the subdomain in the email address. For example, *@*.example.com will filter all email addresses in all subdomains of the example.com domain.

      The following table displays format examples that are valid or not valid:

      Table 1. Format Examples for Approved Senders

      Valid

      Not Valid

      [email protected]

      name@info.*.example.com

      [email protected]

      		 [email protected].*

      name@*.example.com

      *[email protected]

      name@*

      *@*

      *@example.com

      *@server.example.com

      *@*.example.com

    6. Do either of the following to complete adding the sender:

      • Click Add.

      • Click Preview, and click Add after you confirm all the entries to be added.

        Note: If you selected All Managed Accounts in Step 3, the button label in the Add Approved Sender dialog box is Preview.

        Trend Micro Email Security checks all the entries to identify invalid, duplicate, conflict, and excessive email addresses.

      The address or domain you typed is validated and appears in the list.

    Deleting Safe Senders #

    1. Access the End User Console.
    2. Go to Quarantine > Approved Senders or Quarantine > Blocked Senders.
    3. Optionally, click a sortable column title to sort the list. Click the same title more than once to sort by ascending  or descending  order. Sortable columns include the following:

      • Sender: Email address or domain of the sender

      • Recipient: Your managed account

      • Date Added: Date and time that the sender was added to the list

      Tip: For example, to group the oldest senders at the top of the list, sort the list by Date Added in descending order.
    4. Do either of the following to select senders to delete:

      • To select one or more senders, select the checkboxes to the left of each entry.

      • To select all senders, select the check box to the left of the Sender column title.

    5. Click Delete to delete the selected senders from the list permanently.

    Continuity Mailbox Overview #

    Trend Micro Email Security provides email continuity against email loss during a mail server outage. If your server becomes unavailable due to a crash or network connectivity problem, Trend Micro Email Security automatically transfers inbound traffic to a backup server until your server is back online.

    On the End User Console, a continuity mailbox is available instantly and automatically, enabling continued email access during an outage without requiring any action from IT. The continuity mailbox allows you to perform the following tasks:

    • Composing and sending messages

    • Viewing inbox messages

    • Replying to, forwarding, and downloading messages

    • Checking sent messages

    When using the continuity mailbox, pay attention to the following:

    • To compose a message or view a message’s details, be aware that only plain text is supported. To avoid losing information such as pictures and links during parsing, it is recommended you download messages to your local system.

    • If you find “Compose” and “Sent Items” are grayed out in the continuity mailbox, contact your administrator to enable email sending in Email Continuity settings.

    Composing a Message #

    The continuity mailbox provides an intuitive and easy-to-use interface to compose, view, forward, download, and reply to email messages.

    1. Click Compose.

      The New Message screen appears.

    2. Specify one or multiple recipients for your email message.
      Note: To edit a recipient address, especially when there are multiple recipients, hold down the Ctrl key while double-clicking the recipient address you want to edit. You can optionally add other email addresses for the Cc or Bcc fields.
    3. Optionally specify your email subject.
    4. Click the attach icon to add attachments.

      Note:       The maximum size of an email message allowed is 10 MB. If a message’s size is larger than 10 MB, the message cannot be successfully delivered.
    5. Click Send.
    What are your Feelings
    Twisted VoIP