<> Trend Micro, Inc. May 11, 2006 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ServerProtect(TM) for Linux(TM) Version 2.5 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Notes: This readme file was current at the time of product release, however, you should check for documentation updates at the Trend Micro Web site: http://www.trendmicro.com/download/ Register online with Trend Micro within 60 days of installation to continue downloading new pattern files and product updates from the Trend Micro Web site. Register during installation, or online at: https://olr.trendmicro.com/registration/ Contents =================================================================== 1. About ServerProtect for Linux 2. What's New 3. Documentation Set 4. System Requirements 5. Installation 5.1 Removing ServerProtect After Evaluation Period 6. Post-Installation Configuration 7. Known Issues 7.1 Non-UTF Characters Display Incorrectly in Logs (Debian Platform) 7.2 Cannot Stop Server If IWSS FTP Scanning Is Also Running 7.3 Single Sign-On (SSO) Does Not Work with Network Address Translation (NAT) 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ServerProtect for Linux ======================================================================== Trend Micro ServerProtect(TM) for Linux(TM) provides comprehensive protection against computer viruses, Trojans, worms, and other security risks for file servers based on the Linux operating system. Managed through an intuitive, portable Web-based console or Linux command line console, ServerProtect provides centralized virus scanning, pattern updates, event reporting and antivirus configuration. 2. What's New ======================================================================== The following new features are available in version 2.5: - RHEL4, SUSE SLES 9/NLD 9, Debian 3.1 with 2.6 kernel support - Single package supports different distributions - Brand new user interface, Trend standard Red Scheme, to unify customer experience - Implementing wildcard support for both scanning/exclusion list - Adopting multi-threading scanning - Configurable Scan Value for CPU resource - Exclude network mounted drives in on-demand scanning - True file type protection by using IntelliScan/Active Action - Random schedule update by different time periods - Enhanced command line and backup configuration file - Better scenario for expiration control - Supports Mozilla Firefox web browser - Adopting Trend Micro Control Manager 3.5 Agent for Central Management - Implementing RemoteInstall to perform mass deploy remotely Refer to the Getting Started Guide for details. 3. Documentation Set ======================================================================== The documentation set for this product includes: In addition to this readme.txt, the documentation set for this product includes the following: - Getting Started Guide -- product overview, installation planning, installation and configuration instructions, and basic information intended to get you "up and running." Electronic versions of the printed manuals are available at: http://www.trendmicro.com/download/ - Online help -- Context-sensitive help screens that provide guidance for performing a task. - Knowledge Base -- a searchable database of known product issues, including specific problem-solving and troubleshooting topics. http://kb.trendmicro.com/solutions/ 4. System Requirements ======================================================================== ServerProtect for Linux requires the following hardware and software specifications on the machines where it is installed: - CPU - Intel(TM) Pentium(TM) II processor (faster processor recommended) - AMD(TM) Athlon(TM) processor - Memory - 256MB or more (512MB recommended for application/file servers) - Disk space - 50MB for the /opt directory - 50MB for the /tmp directory - Supported Red Hat distributions and kernels - Red Hat(TM) Enterprise Linux (AS, ES, WS) 4.0 - kernel 2.6.9-5.EL - kernel 2.6.9-5.ELsmp - kernel 2.6.9-22.EL - kernel 2.6.9-22.ELsmp - kernel 2.6.9-22.0.2.EL - kernel 2.6.9-22.0.2.ELsmp - SUSE(TM) Linux Enterprise Server 9 - kernel 2.6.5-7.97-default - kernel 2.6.5-7.97-smp - kernel 2.6.5-7.244-default - kernel 2.6.5-7.244-smp - Novell(TM) Linux Desktop 9 - kernel 2.6.5-7.111-default - kernel 2.6.5-7.111-smp - kernel 2.6.5-7.244-default - kernel 2.6.5-7.244-smp - Debian 3.1 - kernel 2.6.8-2_16 up - kernel 2.6.8-2_16 smp Note: For other kernels and distributions, refer to the following Web site for additional information: http://www.trendmicro.com/en/products/file-server/ sp-linux/use/kernel.htm - Supported Web browsers for ServerProtect Web console - Microsoft(TM) Internet Explorer 5.5 with Service Pack 2 - Mozilla 1.6 - Mozilla Firefox 1.0 Note: Install Sun Micro(TM) Java(TM) 2 Runtime Environment 1.4.2_01 Mozilla to access the ServerProtect Web console. Otherwise, the product registration does not work. To enable the Java plug-in, go to the Mozilla plug-in directory, and then create a symbolic link to the Java plug-in. For example: cd /usr/lib/mozilla/plugins ln -s \ /usr/java/jre1.4.2/plugin/i386/ns610-gcc32/\ libjavaplugin_oji.so libjavaplugin.so - Supported XWindow graphical desktop environments for simple GUI console - KDE 3.2 or higher Note: The Quick Access console is provided only when you are logged on as root. 5. Installation ======================================================================== You must be logged on as root when performing an installation. To install ServerProtect 2.5: 1. From the directory containing the ServerProtect Linux installation files, enter the following at the command line: ./SProtectLinux-2.5.i686.bin The above command extracts the required files to their correct location. 2. After installation, you can access the ServerProtect Web console from the following URLs: http://:14942/ or https://:14943/ 3. If you are accessing ServerProtect through the Web console, verify that Linux system ports 14942 and 14943 are open. Evaluation Version ~~~~~~~~~~~~~~~~~~~~~~~~~ An evaluation version of ServerProtect for Linux is initially installed. This version is fully functional, however, after 60 days you will no longer be able to access the Web console unless you purchase the standard version of the product. See the "Registering and Activating ServerProtect" topic in the ServerProtect online help for details. Important: Trend Micro recommends that you set your logon password as soon as you install ServerProtect. There is no default password. 5.1 Removing ServerProtect After Evaluation Period ===================================================================== 1. Log on as root. 2. Perform one of the following: a. To remove ServerProtect for the Red Hat, SUSE, and Novell Linux desktop platforms, type the following at the command line: rpm -e SProtectLinux b. To remove ServerProtect for the Debian platform, type the following at the command line: dpkg --purge sprotectlinux The above command automatically stops the ServerProtect service, and removes the application. 6. Post-Installation Configuration ======================================================================== Trend Micro recommends that you take the following actions immediately after installing ServerProtect: 1. Change the Web UI login password. 2. Execute a Manual Update. (See Getting Started Guide for instructions.) 7. Known Issues ======================================================================== Here are the known issues in this release. 7.1 Non-UTF Characters Display Incorrectly in Logs (Debian Platform) ===================================================================== On the Debian platform, date/time formats and some special characters display incorrectly in the logs. The workaround is to set the default locale to {your_locale}.utf8 by issuing the following command: dpkg-reconfigure locales 7.2 Cannot Stop Server If IWSS FTP Scanning Is Also Running ===================================================================== If you have InterScan Web Security Suite (IWSS) installed on the same machine as ServerProtect for Linux (SPLX) and you try to stop SPLX, you may be unable to stop SPLX. The workaround is to stop FTP scanning on IWSS first and then stop SPLX. 7.3 Single Sign-On (SSO) Does Not Work with Network Address Translation (NAT) ===================================================================== When registering the ServerProtect (SPLX) Control Manager agent to a Trend Micro Control Manager (TMCM) server through a NAT, you cannot access the SPLX console through SSO. The workaround is to add port forwarding on your NAT device, add the IP address of the public interface of the NAT to the IPAddressList of the /opt/TrendMicro/SProtectLinux/Agent.ini file, and then restart the SPLX service. You will then be able to access the SPLX console on the TMCM console through SSO. 8. Release History ======================================================================== See the following Web site for more information about updates for this product. http://www.trendmicro.com/download 9. Contact Information ======================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of Trend Micro products can be downloaded from our Web site. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ======================================================================== Trend Micro, Inc. provides virus protection, anti-spam, and content- filtering products and services. Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2006, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, Control Manager, InterScan Web Security Suite, and ServerProtect are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ======================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Getting Started Guide or Administrator's Guide