Using the Apply To: drop down, select whether you want to configure the service at the Global level or at a domain-specific level. Check the Enable box to enable the Click-time URL Protection service.
Note: If you are not performing DKIM validation downstream you must rewrite DKIM signed messages
How do I confirm that the Click-time URL Protection service is working?
Within minutes of enabling the service, you should start to receive emails that include URLs that have been rewritten to point to a https://clicktime.symantec.com/ address.
HTML email formatting may be hiding the rewritten URL
If your email is being displayed in HTML format, it is possible to have the text display a URL or link that is different to the actual destination URL.
For example, both of these links were successfully rewritten by the Click-time URL Protection service, but you can only view the rewritten URL when you hover your mouse pointer over the link or inspect the link's properties:
How do I whitelist a domain to exclude it from Click-time URL Protection processing?