<> Trend Micro, Inc. Janauary 04, 2015 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) for IBM Domino(TM) Version 5.6 SP1, Build zzzz, GM Release ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Notes: This readme file was current at the time of product release. However, you should check for documentation updates at the Trend Micro Web site: http://www.trendmicro.com/download/ Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro Web site. Register during installation, or online at: https://olr.trendmicro.com/registration/ Trend Micro always seeks to improve its documentation. If you have questions, comments, or suggestions about this or any Trend Micro documents, please contact us at docs@trendmicro.com. Your feedback is always welcome. Please evaluate this documentation on the following site: http://www.trendmicro.com/download/documentation/rating.asp Contents ===================================================================== 1. About ScanMail for IBM Domino 2. What's New 3. Documentation Set 4. System Requirements 5. Installation and Upgrade 5.1 Using Trend Micro Control Manager to Manage ScanMail 6. Post-Installation Configuration 6.1 Register and Activate ScanMail 6.2 Start/Restart the Domino Server 6.3 Test Installation with EICAR 6.4 Update Components Manually 6.5 Scan Databases Manually 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ScanMail for IBM Domino (SMID) ======================================================================== Trend Micro ScanMail for IBM Domino works in real time to prevent viruses, malicious code, and unwanted content from entering your Domino environment via email, replication, or infected documents. Malware scanning is performed in memory, which significantly increases the scanning speed. ScanMail offers flexible, scalable configuration and remote management through the Notes workspace, as well as Web access of ScanMail databases. ScanMail is fully compatible with Trend Micro Control Manager(TM), Trend Micro centralized management console that lets you consolidate antivirus and content security protection into a cohesive solution. 2. What's New ======================================================================== 2.1 Graymail Filter ==================================================================== Graymail refers to solicited bulk email messages that are not spam. In this version,SMID provides the graymail filter for IBM Domino environments. Graymail messages are categorized into marketing graymail, social network graymail, and other graymail. SMID enables you to configure the graymail filter according to your organization needs. 2.2 Enhanced EUQ ==================================================================== End-User Quarantine (EUQ) is enhanced to support both the anti-spam and graymail filtering. After enabling EUQ, you can manage quarantined email messages by sender addresses and graymail categories. 2.3 Enhanced DLP ==================================================================== In this version, SMID integrates the latest Trend Micro Data Loss Prevention (DLP) scan engine, which provides more than 200 predefined DLP templates. Moreover, the enhanced DLP filter allows you to define a set of DLP rules and combine multiple rules using logical operations. The enhanced DLP Filter also enables you to perform manual and scheduled scanning for the non-mail documents within the Notes database. 2.4 Latest Platform Support ==================================================================== This version of ScanMail supports IBM(TM) Domino(TM) 9.0.1. 3. Documentation Set ======================================================================== The documentation set for this product includes: - Readme.txt -- version enhancements, basic installation, known issues, and release history. - Help Database -- Comprehensive help screens that provide guidance for performing tasks. - Administrator's Guide -- product overview, installation planning, installation and configuration instructions, and detailed information for managing the product environment. Electronic versions of the printed manuals are available at: http://www.trendmicro.com/download/ - Knowledge Base -- a searchable database of problem-solving and troubleshooting topics. http://kb.trendmicro.com/solutions/ 4. System Requirements ======================================================================== ScanMail for IBM Domino requires the following hardware and software specifications on the servers where it is installed: - Lotus(TM) Domino(TM) 8.0.1, 8.0.2, 8.5.0, 8.5.1, 8.5.2, and 8.5.3 - IBM(TM) Domino(TM) 9.0, and 9.0.1 - Microsoft Windows 2003 Server Standard Edition - Microsoft Windows 2003 Server Enterprise Edition, Service Pack 2 - Microsoft Windows 2003 Server x64 Edition - Microsoft Windows 2003 R2 Server x64 Edition - Microsoft Windows 2008 Standard Edition, Service Pack 2 - Microsoft Windows 2008 Enterprise Edition, Service Pack 2 - Microsoft Windows 2008 Standard x64 Edition, Service Pack 2 - Microsoft Windows 2008 Enterprise x64 Edition, Service Pack 2 - Microsoft Windows Server 2008 R2 Standard Edition x86-64 - Microsoft Windows Server 2008 R2 Enterprise Edition x86-64 - Microsoft Windows 2008 R2 Service Pack 1 - Microsoft Windows 2012 Server Standard Edition - Microsoft Windows 2012 Server DataCenter Edition - Microsoft Windows 2012 R2 Server Standard Edition - Microsoft Windows 2012 R2 Server DataCenter Edition - Intel Pentium(TM) 4 processor or higher - 512-MB of memory; 1-GB recommended - 400-MB available disk space for program files; 100-MB available disk space on each partition; 680-MB available under the system default temporary folder during installation. - Internet access (for components download) Note: Advanced Persistent Threat (APT) Prevention features are not available to the Windows 32-bit platform. 5. Installation and Upgrade ======================================================================== This section explains key steps for installing the software. Refer to the Administrator's Guide for detailed installation information. IMPORTANT: Shut down the Domino server before installing or removing ScanMail for IBM Domino. To install ScanMail for IBM Domino on a Windows server: 1) Do one of the following to navigate to the Setup program (setup.exe): - If you are installing from the Trend Micro Enterprise Protection CD, go to the ScanMail for IBM Domino folder on the CD. - If you have downloaded the software from the Trend Micro Web site, navigate to the relevant folder on your computer. 2) Double-click setup.exe. The InstallAnywhere Wizard screen appears, followed by the Welcome screen. 3) Click Next. The Software License Agreement screen appears. If you do not agree with the terms of the license, click "I do not accept the terms of the license agreement." The installation will then discontinue. Otherwise, click "I accept the terms of the license agreement." 4) Click Next. Setup checks the Product Activation screen. If the server has ScanMail 5.6 installed, Setup will skip the Product Activation screen and proceed directly to the Domino Server screen. - From the Product Activation screen, you may enter an Activation Code to activate ScanMail or skip this screen and activate later using the Configuration Database. Do one of the following: - If you have not registered ScanMail: Go to the Trend Micro Product Registration Web site (https://olr.trendmicro.com/registration) and follow the on-screen instructions to register your product. Register your product to ensure eligibility to receive the latest security updates and other product and maintenance services. After registration is complete, Trend Micro will send a ScanMail Activation Code (AC) to the email address you specified during registration. Use this Activation Code to activate ScanMail. - If you have an Activation Code: Type the Activation Code for ScanMail. To use the full functionality of ScanMail 5.6 SP1, obtain a ScanMail Full or Suite with Data Protection Activation Code, and then activate the software. - If you do not have a Registration Key and Activation Code, or you want to activate later: Skip this screen. Setup will install ScanMail, however, the ScanMail scan and update task will not be loaded. Activate ScanMail immediately after installation to start the Domino environment protection. 5) Click Next. Setup extracts installation files to the local temporary directory and then proceeds to the Domino Server screen. 6) On the Domino Server screen, click Add to specify the target server notes.ini, including the partitioned servers, where ScanMail should be installed. Click Remove to delete a server from the list. Note: If the server has ScanMail 5.6 installed, you cannot remove the server from the list, because ScanMail 5.6 SP1 installer will force ScanMail 5.6 to upgrade to ScanMail 5.6 SP1. If you have a partitioned Domino server, install ScanMail on the partition you want to protect. Setup lists the existing ScanMail installation. 7) Click Next. The Domino Server Binary and Data Directories screen appears. Setup detects the Domino Binary and Data paths. If any of the paths are missing in the specified notes.ini file, double-click the empty item to specify the correct path. 8) Click Next. The Setup analyzes the target server(s), checks for installed ScanMail information, and then displays the result. 9) Click Next. The Installation Path for ScanMail screen displays. Select the path to install ScanMail 5.6 SP1 that allows you to install multiple ScanMail binary for different Domino servers. 10) Click Next. The Database Replication Settings screen appears. Select which ScanMail databases Setup will enable for replication. Except for the Quarantine Database, Setup enables the replication of all ScanMail databases. If there are server(s) with ScanMail installed and the Configuration Database is being replicated, you may skip this option on subsequent installation. Note: Remember to schedule the replication of the Configuration Database after completing the installation to receive the default policy. 11) Click Next. The Default Policy Selection screen appears. Select which server(s) should get default policies. Note: A single ScanMail server or the first server should get the default policy. 12) Click Next. The ScanMail Administrator screen appears. Do one of the following: - Type a single administrator account / group that will have Manager access to all ScanMail databases. - Otherwise, if the target server(s) are partitioned server(s) and you have different administrator groups for each partition, specify different user(s) or user group(s) for each partitioned server. Then type the administrator account for each server in the Administrator column. 13) Click Next. The installation begins. 14) After the installation completes, the Successful Installation screen displays. 15) Click Next. The Introducing Control Manager Agent for SMID screen displays. Click Finish to close the Setup window. See Test Installation with EICAR in the next section to confirm whether ScanMail was successfully installed. Note: If you are using another antivirus product (like ServerProtect) on the Domino server where you plan to install ScanMail, be sure to configure that antivirus product to exclude from scanning ScanMail "smd" and temporary directories for each partition; otherwise, a scanning conflict may occur. Refer to the Administrator's Guide - Set Temporary Directories topic for details. Refer to the ServerProtect documentation for instructions to exclude Domino folders and directories from scanning. 5.1 Using Trend Micro Control Manager to Manage ScanMail ===================================================================== To manage ScanMail from a Control Manager management console, you must have any of the following releases applied on the Control Manager server: - Trend Micro Control Manager 5.5 with Service Pack 1 - Trend Micro Control Manager 6.0 6. Post-Installation Configuration ======================================================================== After you have successfully installed ScanMail, Trend Micro recommends performing the following post-installation configuration steps. 6.1 Register and Activate ScanMail ===================================================================== Note: Skip this step if you have already activated ScanMail during installation. After you have successfully installed ScanMail, check the license status and expiration date on the Configuration Database, click Administration > License Information. If the status is not activated or is expired, obtain an Activation Code and then perform the following: a. Open the ScanMail Configuration Database. b. Click Administration > Product License. c. Create a license profile. d. Delete the old license profile. Refer to the Registering and Activating ScanMail topic in the Administrator's Guide or Help Database for details. 6.2 Start/Restart the Domino Server ===================================================================== Start/Restart the Domino server to load ScanMail real-time scan tasks. 6.3 Test Installation with EICAR ===================================================================== Trend Micro recommends testing ScanMail and confirming that it works by using the EICAR test file. To test the ScanMail installation with EICAR: a. Open an ASCII text file and copy the following 68-character string to it. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* b. Save the file as eicar_test.com to a temp directory and then close it. c. Attach eicar_test.com to an email and send it to yourself or a test mailbox. d. Check the virus log in the ScanMail Log Database or notification sent to administrator (if Notification is set). 6.4 Update Components Manually ===================================================================== Use the Configuration Database to invoke on-demand antivirus and content security products update. To update components manually: a. Open the ScanMail Configuration Database. b. On the left-hand menu, click Actions > Manual Update. c. On the working area, click Edit. d. Select which component(s) to update. e. Set the update source. f. Configure proxy settings for component download. g. Define the update notification. h. Click Update Now. i. Click Save & Close to save the on-demand component update settings. 6.5 Scan Databases Manually ===================================================================== Use the Configuration Database to invoke manual database scanning. To scan databases manually: a. Open the ScanMail Configuration Database. b. From the left menu, click Actions > Manual Scan. c. From the working area, click Edit. d. Click the General tab to enable incremental scanning and specify the number of minutes that corresponds to the duration of the scan. e. Click the Databases to scan tab to choose which database(s) to scan: All databases: ScanMail scans all databases stored on the Domino server. Scan selected databases only: ScanMail scans specific database(s) based on the directory and database list. Exclude selected databases from scanning: ScanMail skips scanning of specified database(s). Click Add, Remove, or Remove All to manipulate the database(s) in the list. f. Click the Scan Options tab to set the following scan options: - Virus Scan - Scan Restrictions - Script Filter g. Define the notification template. h. Click Scan Now. i. Click Save & Close. 7. Known Issues ======================================================================== There are no known issues for this release. 8. Release History ======================================================================== Previous releases include the following: - ScanMail for Domino 3.0, July 1, 2005 - ScanMail for Domino 3.0 Service Pack 3, April 21, 2006 - ScanMail for Domino 3.0 Patch 4 for Service Pack 3, May 2, 2008 - ScanMail for Domino 5.0 October 29, 2010 - ScanMail for Domino 5.0 Patch 4, November 30, 2011 - ScanMail for Domino 5.0 Patch 5, September 18, 2012 - ScanMail for Lotus Domino 5.5, November 7, 2012 - ScanMail for Domino 5.0 Patch 6, April 26, 2013 - ScanMail for Lotus Domino 5.5 Patch 1, April 26, 2013 - ScanMail for IBM Domino 5.6, September 30, 2014 9. Contact Information ======================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of Trend Micro products can be downloaded from our Web site. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ======================================================================== Trend Micro, Inc. provides centrally controlled server-based virus protection and content-filtering products and services. By protecting information that flows through Internet gateways, email servers, and file servers, Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2015, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, Control Manager, and ScanMail are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ======================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license/