<<<>>> Trend Micro, Inc. Jan 5, 2015 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) (for Microsoft(TM) Exchange) 11.0 Service Pack 1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Note: This readme file was current as of the date above. However, all customers are advised to check the Trend Micro website for documentation updates at: http://docs.trendmicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: http://olr.trendmicro.com/ Contents =================================================================== 1. About ScanMail for Microsoft Exchange 1.1 Overview of this Release 1.2 Who Should Install this Release 2. What's New 2.1 New Features and Enhancements in 11.0 Service Pack 1 2.2 Resolved Issues 3. Documentation Set 4. System Requirements 5. Installation/Uninstallation 5.1 Installation Notes 6. Post-installation Configuration 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ScanMail for Microsoft Exchange ======================================================================== ScanMail protects Exchange Server 2013, Exchange Server 2010, and Exchange Server 2007. Use the ScanMail installation program to quickly install ScanMail to one or more, local or remote, Exchange servers. Once installed, ScanMail can protect your servers in real time against viruses/malware, Trojans, worms, and spyware/grayware. ScanMail sustains business and network integrity by screening out spam messages and messages containing undesirable or unwanted content.ScanMail monitors and protects sensitive information that is travelling across your network. 1.1 Overview of this Release ===================================================================== Service Pack 1 introduces new features that support centralized logs, quarantine queries, and report generation. The detection of new spam sources, and Attachment Blocking and Data Loss Prevention policy enhancements are also introduced in this version. 1.2 Who Should Install this Release ===================================================================== Administrators currently running ScanMail (for Microsoft Exchange) 11.0 should install this Service Pack. 2. What's New ======================================================================== 2.1 New Features and Enhancements in 11.0 Service Pack 1 ===================================================================== This service pack includes the following new features and enhancements: 2.1.1 New Spam Source Detection ===================================================================== Content Scanning provides scanning for new sources of spam messages when used in conjunction with Web Reputation Services. 2.1.2 Server Groups ===================================================================== This version of ScanMail provides the ability to create server groups to easily manage and monitor multiple Exchange servers. 2.1.3 Centralized Logging and Quarantine Queries ===================================================================== Using the Server Groups feature, this version of ScanMail provides the ability to centrally query logs and quarantined messages. 2.1.4 Centralized Report Generation ===================================================================== Using the Server Groups feature, this version of ScanMail provides the ability to generate reports for multiple servers. 2.1.5 UNC Directory Support ===================================================================== This version of ScanMail supports UNC shared directories for the quarantine, backup, and archive directories. 2.1.6 Product Enhancements ===================================================================== This service pack includes all enhancements included in the ScanMail 11.0 Patch 1 and ScanMail 11.0 Patch 2 releases. Refer to the ScanMail 11.0 Patch 1 and ScanMail 11.0 Patch 2 readme files for more information. This release also includes the following enhancements: 1. Spam Prevention:Content Scanning Filter and Web Reputation Filter - This version enables the ScanMail Spam Prevention:Content Scanning filter and Web Reputation filter to take the "Pass" action. 2. Data Loss Prevention - This version enables Digital Asset Discovery in single or multiple message parts. This version also supports new policy targets, including "Specific recipient(s)" and "Specific sender(s) to specific recipient(s)". 3. Attachment Blocking - This version of ScanMail supports a new policy target ("From specific sender(s) to any recipient") for the Attachment Blocking filter. 4. Advanced Threat Scan Engine - This version of ScanMail adds a "Scan Level" for the Advanced Threat Scan Engine scanning that allows you to specify how "aggressively" ScanMail examines messages and files for advanced threats. 5. End User Quarantine - This version of ScanMail provides the ability to automatically delete the spam folder for all mail accounts after disabling the End User Quarantine. 6. Manual/Scheduled Scan - This version of ScanMail supports the option of enabling "Public folder" scanning for Manual/Scheduled Scans on Exchange 2013; This version also enhances reporting on detections found on specific databases. 7. Manual/Scheduled scan - This version of ScanMail provides the ability to allow users to specify a time delay after each message is scanned to adjust the speed of Manual and Scheduled Scans. To specify the time delay, add the following registry key: * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion * Key: SleepIntervalForEachMessage * Type: REG_DWORD * Data value: Time delay in milliseconds Notes: - After adding the registry key, restart the "ScanMail for Microsoft Exchange Master Service" to activate the configuration settings. - To disable this feature, set the value of the key to "0" or delete the key. - Manual and Scheduled Scans take longer to complete when this feature is enabled. 2.2 Resolved Issues ===================================================================== This service pack includes all fixes resolved in ScanMail 11.0 Patch 1 and ScanMail 11.0 Patch 2. It also includes the following new resolved issues: 2.2.1 ScanMail does not scan messages which cannot be parsed by ScanMail. This version of ScanMail quarantines these messages as Unscannable Messages when ScanMail is unable to parse a message. ScanMail can also send notifications to the administrator. 2.2.2 This version of ScanMail ensures that users can register to Control Manager 6.0 servers without an RC4 cipher through HTTPS. 3. Documentation Set ======================================================================== o Readme.txt -- basic installation, known issues, release history and contact information o Administrator's Guide -- product overview, configuration instructions, and detailed information for managing the product environment. Electronic versions of the printed manuals are available at: http://docs.trendmicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx o Installation Guide -- A PDF document containing product requirements, deployment planning, installation instructions and other information intended to get you "up and running." o Online help -- Context-sensitive help screens that provide guidance for performing a task. 4. System Requirements ======================================================================== To install ScanMail with Microsoft Exchange Server 2013 and Exchange 2013 Service Pack 1: Processor --------- - x64 architecture-based computer with Intel processor that supports Intel 64 architecture (formerly known as Intel EM64T) - AMD processor that supports the AMD64 platform Memory ------ - 1GB RAM (2GB RAM recommended) (Exclusively for ScanMail) Disk space ---------- - 2GB free disk space Operating System ---------------- - Windows Server 2012 R2 Standard or Datacenter - Windows Server 2012 Standard or Datacenter - Windows Server 2008 R2 Standard with SP1 - Windows Server 2008 R2 Enterprise with SP1 - Windows Server 2008 R2 Datacenter RTM or later Mail Server ----------- - Microsoft Exchange Server 2013 Web Server ---------- - Microsoft Internet Information Services (IIS) 8.5 - Microsoft Internet Information Services (IIS) 8.0 - Microsoft Internet Information Services (IIS) 7.5 Browser ------- - Microsoft Internet Explorer 6.0, 7.0, 8.0, 9.0, 10.0, 11.0 - Mozilla Firefox 3.0 or later MSXML ------- MSXML 4.0 SP2 or above .NET Framework -------------- - .NET framework 3.5 SP1 required To install ScanMail with Microsoft Exchange Server 2010: Processor --------- - x64 architecture-based processor that supports Intel Extended Memory 64 Technology (Intel EM64T) - x64 architecture-based computer with AMD 64-bit processor that supports AMD64 platform Memory ------ - 1GB RAM (2GB RAM recommended) (Exclusively for ScanMail) Disk space ---------- - 2GB free disk space Operating System ---------------- - Microsoft Windows Server 2012 Standard or Datacenter - Microsoft Windows Server 2008 with Service Pack 2 (64-bit) - Microsoft Windows Server 2008 R2 with Service Pack 1 (64-bit) - Microsoft Windows Server 2008 R2 (64-bit) - Microsoft Small Business Server (SBS) 2011 Note: Microsoft Small Business Server (SBS) 2011 received limited compatibility testing with this version of ScanMail. The installation recommendation is to uninstall Microsoft ForeFront from Microsoft Small Business Server (SBS) 2011 prior to installing ScanMail. Mail Server ----------- - Microsoft Exchange Server 2010 with Service Pack 3 - Microsoft Exchange Server 2010 with Service Pack 2 - Microsoft Exchange Server 2010 with Service Pack 1 - Microsoft Exchange Server 2010 Web Server ---------- - Microsoft Internet Information Services (IIS) 8.0 - Microsoft Internet Information Services (IIS) 7.5 - Microsoft Internet Information Services (IIS) 7.0 Browser ------- - Microsoft Internet Explorer 6.0, 7.0, 8.0, 9.0, and 10.0 - Mozilla Firefox 3.0 or later MSXML ------- MSXML 4.0 SP2 or above .NET Framework -------------- - .NET framework 3.5 SP1 required To install ScanMail with Microsoft Exchange Server 2007: Processor --------- - x64 architecture-based processor that supports Intel Extended Memory 64 Technology (Intel EM64T) - x64 architecture-based computer with AMD 64-bit processor that supports AMD64 platform Memory ------ - 1GB of RAM (2GB RAM recommended) (Exclusively for ScanMail) Disk space ---------- - 2GB free disk space Operating System ---------------- - Microsoft Windows Server 2008 with Service Pack 2 (64-bit) - Microsoft Windows Server 2008 R2 with Service Pack 1 (64 bit) - Microsoft Windows Server 2008 R2 (64 bit) - Microsoft Windows Small Business Server 2008 (64 bit) Note: Microsoft Small Business Server (SBS) 2008 received limited compatibility testing with this version of ScanMail. The installation recommendation is to uninstall Microsoft ForeFront from Microsoft Small Business Server (SBS) 2008 prior to installing ScanMail. - Microsoft Windows Server 2003 R2 with Service Pack 2 (64-bit) - Microsoft Windows Server 2003 with Service Pack 2 (64-bit) Mail Server ----------- - Microsoft Exchange Server 2007 with Service Pack 3 - Microsoft Exchange Server 2007 with Service Pack 2 - Microsoft Exchange Server 2007 with Service Pack 1 Web Server ---------- - Microsoft Internet Information Services (IIS) 7.5 - Microsoft Internet Information Services (IIS) 7.0 - Microsoft Internet Information Services (IIS) 6.0 Browser ------- - Microsoft Internet Explorer 6.0, 7.0, 8.0, and 9.0 - Mozilla Firefox 3.0 or later MSXML ------- MSXML 4.0 SP2 or above .NET Framework -------------- - .NET framework 3.5 SP1 required To integrate with Trend Micro Products: Trend Micro Control Manager --------------------------- - Trend Micro Control Manager 5.0 with Patch 7 and Hotfix 2108 - Trend Micro Control Manager 5.5 with Service Pack 1 - Trend Micro Control Manager 6.0 with Service Pack 1 Smart Protection Server ----------------------- - Smart Protection Server 2.0 - Smart Protection Server 2.1 - Smart Protection Server 2.5 - Smart Protection Server 3.0 - OSCE Server Intergrated Smart Protection Server Deep Discovery Advisor Server ----------------------------- - Deep Discovery Advisor Server 2.92 or later Deep Discovery Analyzer ------------------------ - Deep Discovery Analyzer 5.0 5. Installation/Uninstallation ======================================================================== 5.1 Installation/Uninstallation Notes ===================================================================== - This Service Pack can be used for Normal and Cluster servers - This Service Pack supports remote and multi-server deployment - This Service Pack automatically restarts the following services on both Normal and Cluster Servers: - ScanMail for Microsoft Exchange Master Service - ScanMail for Microsoft Exchange Remote Configuration Server - ScanMail for Microsoft Exchange System Watcher - ScanMail EUQ Monitor - Microsoft Exchange Transport Service - IIS Admin Service - MOM service - HealthService service - To install/uninstall this Service Pack, the minimum privilege required is local administrator and domain user. - This version supports silent installations. Refer to the Trend Micro ScanMail (for Microsoft Exchange) 11.0 Service Pack Installation Guide for more details. - Run Setup.exe and select Install. The framework automatically installs on the appropriate directory, replaces outdated files, and updates the database. The "Successfully completed" count increases upon completion of the installation - To uninstall this Service Pack, run Setup.exe and select uninstall. The framework automatically rolls back until the setup screen displays that the uninstallation was successful. Refer to the Trend Micro ScanMail (for Microsoft Exchange) 11.0 Service Pack Installation Guide for detailed information. 6. Post-installation Configuration ======================================================================== No special post-installation steps are required. Refer to the Trend Micro ScanMail (for Microsoft Exchange) 11.0 Service Pack Installation Guide for more information. Note: Trend Micro recommends that updating all components immediately after installing the product. 7. Known Issues ======================================================================== 7.1 ScanMail cannot support UNC directory if it is used as mapping network driver. 7.2 ScanMail cannot support the UNC directory if the UNC directory located in its local disk. 7.3 ScanMail cannot support the UNC directory if the UNC path contains any space character. 7.4 ScanMail cannot support the UNC directory if the UNC directory located in machines which are in different domains. 7.5 End User Quarantine can't be supported for public folder recipients. 7.6 ScanMail online help cannot support the version 6.0 of Microsoft Internet Explorer. 8. Release History ======================================================================== ScanMail 10.0 for Microsoft Exchange December 2009 ScanMail 10.0 for Microsoft Exchange Service Pack 1 October 2010 ScanMail 10.2 for Microsoft Exchange September 2011 ScanMail 10.2 for Microsoft Exchange Service Pack 1 June 2012 ScanMail 10.2 for Microsoft Exchange Service Pack 2 December 2012 ScanMail 11.0 for Microsoft Exchange May 2013 ScanMail 11.0 for Microsoft Exchange Patch 1 January 2014 ScanMail 11.0 for Microsoft Exchange Patch 2 December 2014 9. Contact Information ========================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of Trend Micro products can be downloaded from our website. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, United States, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ========================================================================== Trend Micro, Inc. provides centrally controlled server-based virus protection and content-filtering products and services. By protecting information that flows through Internet gateways, email servers, and file servers, Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2015, Trend Micro, the Trend Micro t-ball logo, and ScanMail are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ========================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license Third-party licensing agreements can be viewed: - By referring to the file "Third-party_licensing_agreements.doc"