Published by: Trend Micro, Incorporated
Published on: November 2014
This readme file was current as of the date above. All customers are advised to check the Trend Micro Online Help Center for updates (docs.trendmicro.com).
About Trend Micro Security Agent
The Trend Micro Security Agent is the endpoint component for the "Services" edition of the Trend Micro Worry-Free Business Security package. The Security Agent is installed on client devices and protects your Windows, Mac, and Android devices from Internet threats. It is managed through the console. The Agent provides real-time, scheduled, and manual threat scanning capabilities along with other protection.
New in this Release
Worry-Free Business Security Services includes the following new features and enhancements.
|
Feature |
Description |
|---|---|
|
Agent Privileges |
Administrators can control agent privileges for enabling or disabling scheduled scans. |
|
Apple Push Notification Service (APNs) Feedback |
Based on feedback from the Apple Push Notification Service (APNs), inactive iOS devices will be automatically deleted from the management console. |
|
Feature |
Description |
|---|---|
|
Detection Enhancements |
New scan feature enables Security Agents to perform enhanced memory scanning for Real-time Scans. |
|
Enhanced policy enforcement allows blocking of known and potential malware threats to reduce false positives and increase detection rates. |
|
|
Security Agents can also prevent browser exploits and detect newly downloaded executable programs. |
|
|
Performance Enhancements |
Cache mechanisms provide significantly faster on-demand scans. |
|
Deferred scans improve the performance of copy and scan processes by allowing users to delay the scanning process when copying files. |
|
|
Google Chrome Support |
Worry-Free Business Security Services now support Google Chrome browsers. |
|
New User Interface |
The Windows Security Agent features an enhanced user interface. |
|
Increased Support |
Error messages with links to related Knowledge Base articles assist with troubleshooting during the installation process. |
|
Web Reputation block messages have added information on what users can do when they encounter blocked websites. |
|
|
New Hot Fix and Patch Mechanism |
An enhanced hot fix and patch deployment for Security Agents greatly reduces bandwidth consumption during updates. |
|
Feature |
Description |
|---|---|
|
New Platform |
The Security Agent supports installation on Mac OS X. 10.10 (Yosemite). |
|
Faster Scans |
Agents also provide significantly faster on-demand scans as well as faster scheduled and manual scans. |
|
Feature |
Description |
|---|---|
|
Languages |
Arabic, Hebrew, Greek, Korean, and Thai are no longer supported. |
Version 5.6
|
Feature |
Description |
|---|---|
|
Data Security Enhancements(Android and iOS) |
Administrators can make these data security features optional for bring-your-own-device (BYOD) heavy environments
|
|
Mobile Application Reputation(Android) |
|
|
Web Reputation(Android) |
|
|
New Platform Support |
|
Worry-Free Business Security Services Documentation
Worry-Free Business Security Services documentation includes the following:
|
Documentation |
Description |
|---|---|
|
Help |
HTML files compiled in WebHelp or CHM format that provide "how to's", usage advice, and field-specific information |
|
Readme file |
Contains a list of known issues and basic installation steps. It may also contain late-breaking product information not found in the Help or printed documentation |
|
Knowledge Base |
An online database of problem-solving and troubleshooting information. It provides the latest information about known product issues. To access the Knowledge Base, go to the following website: |
Download the latest version of the PDF documents and readme at:
http://docs.trendmicro.com/en-us/smb/worry-free-business-security-services.aspx
System Requirements
Web Console
|
Requirement |
Minimum Specifications |
|---|---|
|
Browser |
|
|
PDF reader |
Adobe™ Acrobat™ Reader 6.0. Newer versions highly recommended. |
|
Display |
High-color display with a resolution of 1024x768 pixels or higher |
Windows Agent Minimum Requirements
|
Processor |
Operating System |
Clock Speed |
|---|---|---|
|
Windows Server 2008, SBS 2008, or EBS 2008 |
1GHz |
|
Windows Vista and Windows 7 |
800MHz |
|
|
Windows XP, Server 2003, SBS 2003, or Home Server |
450MHz |
|
|
Windows 8, Windows 8.1, Server 2008 R2, Home Server 2011, SBS 2011, SBS 2011 Essentials, Server 2012/2012 R2, and Server 2012/2012 R2 Essentials |
1.4 GHz |
|
Operating System |
Memory Exclusively for the Security Agent |
|---|---|
|
Windows SBS 2011 Standard/Essentials |
|
|
Windows SBS/EBS 2008 |
|
|
Windows 7, 8, 8.1, Server 2003, SBS 2003 or Server 2008 |
|
|
Windows 2008 R2, Home Server 2011, 2012/2012 R2, 2012/2012 R2 Essentials |
|
|
Windows Vista, Windows Home Server |
|
|
Windows XP |
|
|
Scan Method |
Disk Space |
|---|---|
|
Smart Scan |
450MB total for Security Agents
|
|
800MB total for Update Agents
|
|
|
Conventional Scan |
700MB total for Security Agents
|
|
1050MB total for Update Agents
|
|
Series or Family |
Edition |
Service Pack or Release |
|---|---|---|
|
Windows XP |
|
SP3 |
|
Windows Vista |
|
SP1 or SP2 |
|
Windows 7 |
|
With or without SP1 |
|
Windows 8 |
|
N/A |
|
Windows 8.1 |
|
Update 1 |
|
Windows Server 2003 and 2003 R2 |
|
SP1 or SP2 |
|
Windows Small Business Server (SBS) 2003 and 2003 R2 |
|
SP1 or SP2 |
|
Windows Storage Server 2003 and 2003 R2 |
N/A |
N/A |
|
Windows Home Server |
N/A |
Power Pack 2 or 3 |
|
Windows Server 2008 |
|
SP1 or SP2 |
|
Windows Server 2008 R2 |
|
With or without SP1 |
|
Windows SBS 2008 |
|
SP1 or SP2 |
|
Windows Essential Business Server (EBS) 2008 |
|
SP1 or SP2 |
|
Windows Storage Server 2008 and 2008 R2 |
|
N/A |
|
Windows SBS 2011 |
|
With or without SP1 |
|
SP1 (included out-of-the-box) |
|
|
Windows Home Server 2011 |
N/A |
SP1 |
|
Windows Server 2012 |
|
N/A |
|
Windows Server 2012 R2 |
|
Update |
|
Windows Storage Server 2012 |
|
N/A |
|
Windows Storage Server 2012 R2 |
|
Update |
|
Browser |
Version |
|---|---|
|
Internet Explorer |
7.0, 8.0, 9.0, 10.0, 11.0 (32 and 64 bit) |
|
Firefox |
31 (ESR), 32, 33 |
|
Google Chrome™ |
Recent versions |
|
Requirement |
Minimum Specifications |
|---|---|
|
Display |
256-color display or higher with resolutions of 800x600 or higher |
|
Application |
Version |
|---|---|
|
Citrix Presentation Server™ |
4.0, 4.5, 5.0 (XenApp) |
|
XenServer |
6.0, 6.1, 6.2 |
|
XenClient |
2.0, 2.1 |
|
VMware™ ESX™ |
3.x, 4.x, 5.0, 5.1, 5.5 |
|
VMware Server |
1.0.3, 2.0.1 |
|
VMware Workstation |
6.0, 6.5, 7.0, 8.0, 9.0, 10.0 |
|
Microsoft Hyper-V™ Server |
|
|
Windows Server |
2012 |
|
Remote Desktop |
N/A |
Mac Agent Minimum Requirements
|
Requirement |
Minimum Specifications |
|---|---|
|
Processor |
Intel Core processor Note:
Verify the system requirements for your specific Mac OS |
|
Available memory |
256MB |
|
Available disk space |
64MB |
|
Operating system |
|
|
Web browser (for downloading Agent Installer) |
Safari 4.0, 5.0, 5.1, 6.0, 7.0, 8.0 |
Android Agent Minimum Requirements
|
Requirement |
Minimum Specifications |
|---|---|
|
Version |
|
|
Web browser (for downloading Agent Installer) |
|
iOS Profile Minimum Requirements
|
Requirement |
Minimum Specifications |
|---|---|
|
Version |
|
|
Web browser (for downloading the profile) |
|
Installation
Refer to the latest Online Help (http://docs.trendmicro.com/en-us/smb/worry-free-business-security-services.aspx) for information about deploying clients.
Post-Installation Configuration
Trend Micro recommends performing an update immediately after installation.
Known Issues
The following are the known issues in this release:
Windows Agent Known Issues
Web Console
-
JavaScript disabled warning message do not display properly when using Google Chrome browser. The issue can be resolved by refreshing the page.
Client Deployment and Upgrade
-
In Windows 8 and later, proxy traffic requires a specific WFBS-SVC Firewall setting.
-
The WFBS-SVC_Downloader.exe file can only be run on the computer on which the user downloads it. If a user copies the file to another computer and runs it there, an error results.
-
Computer loses network connection temporarily during installation.
-
Users cannot deploy agent program when Internet Explorer 10 or later is running in Metro mode on Windows 8 or later.
Security Agent
-
Client Security supports all 32-bit operating systems and only the following 64-bit platforms: Windows Vista SP1 x64 and later.
-
If Client Security is enabled and a malware program resides in the Security Agent folder before real-time scan starts, Security Agent cannot restrict that malware from updating the registry.
Firewall
-
During Security Agent installation or firewall driver uninstallation, the computer may temporarily lose its network connection. Some applications, such as Secure Shell (SSH), Terminal Services Client, or Remote Desktop could be affected by the disconnection. If the network connection is lost, restart the application after installing the Security Agent or after disabling the firewall.
-
The Security Agent firewall may conflict with other firewall applications. Trend Micro recommends uninstalling or disabling other firewall applications.
-
On VMware clients, the Security Agent firewall may block all incoming packets.
To address this issue, add the following value to the client's registry:
-
Key: HKEY_LOCAL_MACHINE\SOFTWARE\TrendMicro\PC-cillinNTCorp\CurrentVersion\PFW
-
Name: EnableBypassRule
-
Type: REG_DWORD
-
Data: 1
-
-
The firewall does not support IPv6 .
Behavior Monitoring
-
Behavior Monitoring supports all 32-bit operating systems and only the following 64-bit platforms: Windows Vista SP1 x64 and later.
Web Reputation and URL Filtering
-
When running Internet Explorer 9 or later with IE Enhanced Security Configuration, the Web Reputation plug-in module (TmIEPlugInBHO Class) cannot be automatically applied. Risky URLs using SSL cannot be blocked.
-
Web Reputation Services and URL Filtering are not supported when Internet Explorer 10 or later is running in Metro mode on Windows 8 or later.
SBS Dashboard Add-In Tool
-
When Internet Explorer 9 is installed under Windows Small Business Server 2011 Essentials, a popup window concerning unused windows appears when closing the Dashboard console.
-
Dashboard Add-in is not compatible with Internet Explorer Enhanced Security Configuration. Ensure this option is disabled before opening the Dashboard.
Login Script Setup Tool
-
Computers installed with Windows Vista or later that has UAC enabled prohibit automatic installation.
Device Control
-
Multiple log entries appear when a user tries to access or copy files to a USB device. Device Control detects each instance as a single policy violation but includes multiple entries in the logs to differentiate the OS versions.
-
Device Control supports all 32-bit operating systems and only the following 64-bit platforms: Windows Vista SP1 x64 and later.
Mac Agent Known Issues
-
The Agent does not support root accounts.
-
When the operating system is upgraded to Mac OSX 10.8, TMSM does not start. TMSM requires Java and the upgrade to Mac OSX 10.8 automatically removes Java. To fix this, install the latest version of Java and then restart the Mac.
Android Agent Known Issues
-
When WFBS-SVC is installed on a device running Android 2.x, the system proxy is not updated as this version of the operating system does not support system proxies. This could also prevent the device from connecting to the server to receive updates.
-
WFBS-SVC will not be installed on rooted Android devices.
-
If the user goes to WFBS-SVC and taps Clear Data, WFBS-SVC might not be able to connect to the server to receive updates. The user would need to re-enroll the device.
-
If other installed apps interfere with the device’s network connection, WFBS-SVC might not be able to connect to the server to receive updates.
-
When using the Remote Locate feature to find a mobile device, the language code (example: en, jp, fr) that displays in the browser for the embedded Google Map may not be the same as the language used by the web console.
-
WFBS-SVC uses Google Cloud Messaging (GCM) for Android mobile device management commands. This means that sometimes commands sent to Andriod mobile devices can take some time or be unsuccessful.
-
If multiple device administrators manage a single Android mobile device some commands may not be successful (example: reset password).This is because WFBS-SVC uses the Android system Device Administrator for mobile device management commands. When more than one Device Administrator exists for the same Android mobile device, the stricter policy on the device has priority. For example, if two apps both require user to follow a password policy, the stricter is used. The laxer policy will never be applied.
iOS Profile Known Issues
-
Worry-Free Business Security Services uses the Apple Push Notification service (APNs) for iOS mobile device management commands. This means that sometimes commands sent to iOS devices can take some time or be unsuccessful.
-
If the private browsing feature in Safari (under on iOS 7.1) is enabled, iOS devices may not successfully complete device enrollment.
Release History
Release |
Date |
|---|---|
WFBS-H v2.5 |
September 2008 |
WFBS-H v2.5 SP1 |
February 2009 |
WFBS-H v2.5 SP2 |
April 2009 |
WFBS-SVC v3.0 |
December 2009 |
WFBS-SVC v3.5 |
September 2010 |
WFBS-SVC v3.5 SP1 |
November 2010 |
WFBS-SVC v3.5 SP2 |
December 2010 |
WFBS-SVC v3.5 SP3 |
April 2011 |
WFBS-SVC v3.6 |
September 2011 |
WFBS-SVC v3.6 SP1 |
January 2012 |
|
WFBS-SVC v3.7 |
February 2012 |
|
WFBS-SVC v5.0 |
August 2012 |
|
WFBS-SVC v5.1 |
January 2013 |
|
WFBS-SVC v5.2 |
June 2013 |
|
WFBS-SVC v5.3 |
September 2013 |
|
WFBS-SVC v5.6 |
June 2014 |
|
WFBS-SVC v5.7 |
November 2014 |
Contacting Trend Micro
A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees.
You can contact Trend Micro via fax, phone, and email, or visit us at:
Evaluation copies of Trend Micro products can be downloaded from our Web site.
About the License Agreement
Information about your license agreement with Trend Micro can be viewed at http://us.trendmicro.com/us/about/company/user_license_agreements.
Third-party licensing agreements can be viewed by selecting the About option in the application user interface.
About Trend Micro
Trend Micro Incorporated, a global leader in Internet content security and threat management, aims to create a world safe for the exchange of digital information for businesses and consumers. A pioneer in server-based antivirus with over 20 years experience, we deliver top-ranked security that fits our customers’ needs, stops new threats faster, and protects data in physical, virtualized and cloud environments. Powered by the Trend Micro™ Smart Protection Network™ infrastructure, our industry-leading cloud-computing security technology and products stop threats where they emerge, on the Internet, and are supported by 1,000+ threat intelligence experts around the globe. For additional information, visit http://www.trendmicro.com/.
Copyright 2014, Trend Micro Incorporated. All rights reserved. Trend Micro, the Trend Micro t-ball logo, Worry-Free, TrendProtect, and InterScan are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies.