This article applies to:

• Trustwave MailMarshal (SEG)

Question:

• How can I control submission of MailMarshal local domains to the MailMarshal URL Categorizer?
• Can I set the MailMarshal URL Categorization service to use HTTPS?

Information:

Current versions of MailMarshal include a service that extracts URLs from message bodies and attachments and checks them against a database of known suspect URLs (typically associated with malware or other undesirable behaviors).

The check is performed using the Content Analysis Rule condition Where message contains suspect URLs.

You can perform advanced configuration for this feature using Advanced Settings or the Registry.

Local Domain Checking

By default, any URL in the SEG local domains (or subdomains) is not submitted for checking. You can choose to enable checking of local domain URLs.

HTTP or HTTPS Submission

By default, the submission to the remote service uses HTTP (not encrypted) for performance reasons. You can choose to use HTTPS for greater security of submissions.

To change these settings:

• In MailMarshal 10.0 and above, open the Management Console and navigate to Advanced Settings. Add either or both of these values:
  • Name: Engine.URLCategorizerNoLocalDomains
    • Type: Boolean
    • Value: False (unselected) to submit local domain URLs for checking.
  • Name: Engine.URLCategorizerServiceHttps
  • Type: Boolean
  • Value: True (selected) to submit over HTTPS.
• In MailMarshal 8.X and below, open the Registry Editor on the Array Manager. Within the base registry key, navigate to \Default\Engine
  • In version 8.X: HKEY_LOCAL_MACHINE\SOFTWARE\Trustwave\Secure Email Gateway\Default\Engine
  • For information about the registry location for each version, see article Q10832.
  • Enter one or both of the below DWORD values:
    • URLCategorizerNoLocalDomains with a value of 0 to submit local domain URLs for checking.
    • URLCategorizerServiceHttps with a value of 1 to submit over HTTPS.
• Save your registry settings or configuration settings.
• Commit the configuration changes and restart the MailMarshal Engine service on each node.

Note:

As always, take due care when editing the Registry. Trustwave recommends that you make a backup before making any changes.