<<<>>> Trend Micro, Inc. April 2013 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) InterScan(TM) Messaging Security Virtual Appliance 8.5 Version 8.5 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Note: This readme file was current as of the date above. However, all customers are advised to check the Trend Micro website for documentation updates at: http://docs.trendmicro.com/ Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: http://olr.trendmicro.com/ Contents ========================================================= 1. About InterScan Messaging Security Virtual Appliance 2. What's New 3. Documentation Set 4. System Requirements 5. Installation 6. Post-Installation Configuration 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreements ========================================================= 1. About InterScan Messaging Security Virtual Appliance ========================================================================= InterScan Messaging Security Virtual Appliance (IMSVA) integrates multi-tiered spam prevention and anti-phishing with award-winning antivirus and antispyware. Content filtering enforces compliance and prevents data leakage. This easy-to-deploy appliance is delivered on a highly scalable platform with centralized management, providing easy administration. Optimized for high performance and continuous security, the appliance provides comprehensive gateway email security. 2. What's New ========================================================================= IMSVA 8.5 includes the following new features and enhancements: 2.1 Command & Control (C&C) Contact Alert Services ====================================================================== Command & Control (C&C) Contact Alert Services provides IMSVA with enhanced detection and alert capabilities to mitigate the damage caused by advanced persistent threats and targeted attacks. 2.2 Smart Scan ====================================================================== Smart Scan facilitates a more efficient scanning process by offloading a large number of threat signatures previously stored on the IMSVA server to the cloud. 2.3 SMTP Authentication Support for End-User Quarantine ====================================================================== SMTP authentication provides users another option for enabling the End-User Quarantine feature. 2.4 Web Reputation Enhancement ====================================================================== The Web Reputation filter has been enhanced to enable detection of URLs that have not been rated by Trend Micro. This functionality helps increase protection against advanced threats that leverage short-lived malicious websites. 2.5 User Interface Enhancement ====================================================================== Changes in the management console interface enable more simplified configuration and navigation. 3. Documentation Set ========================================================================= The documentation set for this product also includes the following: o Administrator's Guide -- Product overview and configuration instructions. o Installation Guide -- Deployment, installation, and integration information designed to help you install and upgrade IMSVA Electronic versions of the printed manuals are available at: http://docs.trendmicro.com/ o Online help -- Context-sensitive help screens that provide guidance for performing a task o Knowledge Base -- A searchable database of known product issues, including specific problem-solving and troubleshooting topics http://esupport.trendmicro.com 4. System Requirements ========================================================================= 4.1 Operating System ====================================================================== A purpose-built, hardened, and performance-tuned Linux operating system is included with IMSVA. 4.2 Hardware Requirements for Bare Metal Server ====================================================================== Recommended System Requirements - Four Intel(TM) Xeon(TM) CPUs 1.6GHz or above - 8GB RAM - 250GB hard disk space or more. IMSVA automatically partitions the detected disk space based on recommended Linux practices. - Monitor that supports 800 x 600 resolution with 256 colors or higher Minimum System Requirements - Two Intel Xeon CPUs 3GHz - 4GB RAM - At least 120GB hard disk space. IMSVA automatically partitions the detected disk space based on recommended Linux practices. - Monitor that supports 800 x 600 resolution with 256 colors or higher To obtain a list of Trend Micro certified servers that are guaranteed to be compatible with IMSVA, access the following URL: http://www.trendmicro.com/go/certified To obtain a general list of available platforms that should operate with IMSVA, access the following URL: http://wiki.centos.org/HardwareList 4.3 System Requirements for VMware ====================================================================== Recommended Virtual Machine Requirements and System Settings - VMware ESX or ESXi Server Version 4.0 or later - Four virtual processors - 8GB RAM - 250GB of disk space or more. IMSVA automatically partitions the detected disk space based on recommended Linux practices. Minimum Virtual Machine Requirements and System Settings - VMware ESX or ESXi Server Version 4.0 or later - Two virtual processors - 4GB RAM - 120GB disk space. IMSVA automatically partitions the detected disk space based on recommended Linux practices. 4.4 Application Requirements ====================================================================== To connect to the IMSVA CLI console, use an SSH communications application. Browser - Internet Explorer 6 SP 2 - Internet Explorer 7 - Internet Explorer 8 - Firefox 3.5 - Firefox 3.6 - Firefox 4.0 - Firefox 5.0 To access the management console, use the following URL: https://[IP Address]:8445 LDAP Server - Microsoft Active Directory 2003, 2008 or Global Catalog - IBM Lotus Domino 6.5 and 8.5 - Sun One LDAP 5.2 or above - OpenLDAP 2.3.43-3 To view certain items in the management console, your computer must run one of the following: - Java(R) Virtual Machine (JVM) version 5.0 or later - Java Runtime Environment (JRE) version 1.4 or later Trend Micro Control Manager(TM) - Version 5.5 Service Pack 1 Patch 3 - Version 6.0 Patch 3 5. Installation ========================================================================= You can install a fresh version of IMSVA 8.5 or migrate from a specific InterScan Messaging Security product. The configuration and policy information for the following products can be migrated to IMSVA 8.5: - IMSVA 8.2 Service Pack 2 - IMSVA 8.0 Patch 2 - IMSS 7.1 Windows Patch 2 - IMSS 7.1 Linux Patch 3 - IMSS 7.0 Solaris Service Pack 1 Patch 4 Inline upgrade from IMSVA 8.2 Service Pack 2 (Hot fix 1698 or later) to IMSVA 8.5 is supported in this release. For installation instructions, see the IMSVA 8.5 Installation Guide. By default, the IMSVA server is not an Open Relay after installation. If you activate SPS, SPS scanning is enabled by default. Activating SPS also activates IP Filtering. You can enable or disable IP Filtering at a later time from the IMSVA management console. Note: The IMSVA 8.5 official release does not support upgrades from the IMSVA 8.5 Beta release. IMSVA supports only migration of Beta configuration settings. 6. Post-Installation Configuration ========================================================================= After successfully installing IMSVA, Trend Micro recommends performing the following post-installation configuration steps: 1. Register and activate IMSVA. 2. Configure user accounts. 3. Download the latest components to enhance security protection. 4. Configure policies and policy notifications. For detailed information about performing these tasks, see the Administrator's Guide. Note: Connection to Cloud Pre-Filter requires port 9000 to be open. If the ActiveUpdate proxy is specified on the management console, the proxy server requires port 9000 to be open. 7. Known Issues ========================================================================= The following list outlines the known issues in this release: 1. IMSVA detects C&C email based on addresses only in the message header. 2. IMSVA is unable to generate one-time reports within one hour after rolling back to a previous version during the upgrade process. 3. IMSVA is unable to open reports generated during the dry run period of the upgrade process after rolling back to version 8.2 Service Pack 2. 4. The IMSVA and Control Manager counters for C&C email do not align. IMSVA counts all incoming and outgoing messages that trigger the filter, while Control Manager counts only outgoing messages. 5. If a message is deferred because of a Smart Scan query error, IMSVA incorrectly logs the action as postponed. 8. Release History ========================================================================= Nov 2005: InterScan Messaging Security Suite for Linux v5.7 Nov 2005: InterScan Messaging Security Suite for Windows v5.7 Jan 2006: InterScan Messaging Security Suite for Solaris v5.7 Aug 2006: InterScan Messaging Security Appliance v1.0 Feb 2007: InterScan Messaging Security Suite for Linux v7.0 Apr 2007: InterScan Messaging Security Suite for Windows v7.0 May 2007: InterScan Messaging Security Appliance v7.0 Jul 2007: InterScan Messaging Security Suite for Solaris v7.0 Oct 2007: InterScan Messaging Security Suite for Linux v7.0 SP1 Nov 2007: InterScan Messaging Security Suite for Windows v7.0 SP1 Jan 2008: InterScan Messaging Security Appliance v7.0 SP1 Feb 2008: InterScan Messaging Security Suite for Solaris v7.0 SP1 Sep 2008: InterScan Messaging Security Virtual Appliance v7.0 Jun 2009: InterScan Messaging Security Suite for Linux v7.1 Nov 2009: InterScan Messaging Security Suite for Windows v7.1 Sep 2010: InterScan Messaging Security Virtual Appliance v8.0 Sep 2011: InterScan Messaging Security Virtual Appliance v8.2 Jul 2012: InterScan Messaging Security Virtual Appliance v8.2 SP1 Dec 2012: InterScan Messaging Security Virtual Appliance v8.2 SP2 9. Contact Information ========================================================================= A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of some Trend Micro products can be downloaded from our website. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ========================================================================= Trend Micro Incorporated, a global leader in Internet content security and threat management, aims to create a world safe for the exchange of digital information for businesses and consumers. A pioneer in server-based antivirus with over 20 years experience, we deliver top-ranked security that fits our customers' needs, stops new threats faster, and protects data in physical, virtualized and cloud environments. Powered by the Trend Micro Smart Protection Network(TM) infrastructure, our industry-leading cloud-computing security technology and products stop threats where they emerge, on the Internet, and are supported by 1,000+ threat intelligence experts around the globe. For additional information, visit www.trendmicro.com. Copyright 2013, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, Smart Protection Network, InterScan, and Control Manager are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreements ========================================================================= Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license/ Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Getting Started Guide or Administrator's Guide