<> Trend Micro, Inc. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) (for Microsoft(TM) Exchange) Version 12.5 Repack 1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Note: This readme file was current as of the date above. However, all customers are advised to check the Trend Micro website for documentation updates at: http://docs.trendmicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: http://olr.trendmicro.com/ Contents =================================================================== 1. About ScanMail for Microsoft Exchange 1.1 Overview of this Release 1.2 Who Should Install this Release 2. What's New 2.1 New Features and Enhancements in 12.5 Repack 1 2.2 New Features and Enhancements in 12.5 2.3 Resolved Issues 3. Documentation Set 4. System Requirements 5. Installation/Uninstallation 5.1 Installation Notes 6. Post-installation Configuration 7. Troubleshooting 8. Known Issues 9. Release History 10. Contact Information 11. About Trend Micro 12. License Agreement =================================================================== 1. About ScanMail for Microsoft Exchange ======================================================================== ScanMail protects Exchange Server 2016, Exchange Server 2013, and Exchange Server 2010. Use the ScanMail installation program to quickly install ScanMail to one or more, local or remote, Exchange servers. Once installed, ScanMail can protect your servers in real time against viruses/malware, Trojans, worms, and spyware/grayware. ScanMail sustains business and network integrity by screening out spam messages and messages containing undesirable or unwanted content. ScanMail monitors and protects sensitive information that is travelling across your network. 1.1 Overview of this Release ===================================================================== In the ScanMail for Microsoft Exchange version 12.5 release, Trend Micro integrates Predictive Machine Learning technology to detect more malware variants; integrates Click Time Protection service to analyze URLs risk during end user clicking them; integrates Advanced Spam Prevention filter to detect spams with social engineering attack behaviors. 1.2 Who Should Install this Release ===================================================================== Administrators currently running Exchange 2016, Exchange 2013 or Exchange 2010 can install this release. This version of ScanMail supports upgrade installation from both v11.0 and v12.0 with latest service pack and patch. 2. What's New ======================================================================== 2.1 New Features and Enhancements in 12.5 Repack 1 ===================================================================== This release includes the following new features and enhancements: 2.1.1 Resolved Service Start Failure Caused by Microsoft Known Issue =================================================================== This version of ScanMail ensures that the "ScanMail_Master" service starts successfully on Windows Server 2012 R2 and Windows Server 2016, when Windows Security Update KB4056895 or KB4056898 (for Windows Server 2012 R2), or KB4056890 (for Windows Server 2016) are installed. For more detailed information, refer to the following location: http://esupport.trendmicro.com/solution/en-US/1119222.aspx 2.1.2 Resolved Japanese and German Characters Display Issue that Causes the Characters to Display Incorrectly when URL Time-of-Click Protection Filter is Enabled =================================================================== The email message contents do not display correctly if the original character set (charset) of the email message body is not UTF-8. This version of ScanMail ensures that the Japanese and German Characters are displayed correctly when the URL Time-of-Click Protection filter is enabled. This repack release merges hotfix 1302 that resolves the issue by enabling ScanMail (for Microsoft Exchange) to use the original charset of the email message body to encode the modified body content after rewriting URLs. 2.2 New Features and Enhancements in 12.5 ===================================================================== This release includes the following new features and enhancements: 2.2.1 Predictive Machine Learning Integration =================================================================== This version of ScanMail provides Predictive Machine Learning to query Trend Micro's cloud service when doing virus scanning for some files, such as, Windows executable file (PE) and script files, to detect more malware variants. 2.2.2 Advanced Spam Prevention =================================================================== This version of ScanMail provides Advanced Spam Prevention to detect a probable scam or attack using email messages that appear to be from a high profile user, such as, a corporate user from the executive team. 2.2.3 URL Time-of-Click Protection =================================================================== This version of ScanMail provides the ability to configure ScanMail to rewrite the URLs in the email message body during scanning, and analyze these URLs only when the message recipient clicks on these URLs. 2.2.4 External Disclaimer =================================================================== This version of ScanMail enables you to configure ScanMail to add a disclaimer at the top of message body of all the incoming messages. 2.2.5 Microsoft System Center 2016 Operations Manager Support =================================================================== This version of ScanMail provides the capability to send information to Microsoft System Center 2016 Operations Manager, which can monitor the ScanMail operation status. 2.2.6 Fresh installation for Exchange 2010 =================================================================== This version of ScanMail supports fresh installation for Exchange 2010. It also allows you to set the remote database authentication mode with Windows Authentication. NOTE: You will need to add ApplicationImpersonation privilege for the ScanMail Windows domain account. To add this privilege, run Exchange PowerShell: New-ManagementRoleAssignment -Name:SmexImpersonation -Role:ApplicationImpersonation -User:UserName 2.3 Resolved Issues ===================================================================== - This version of ScanMail fixed the problem that stops manual and scheduled scan unexpectedly when ScanMail cannot access the mailbox database. - This version of ScanMail skips the health check email messages received from Exchange 2016. - This version of ScanMail ensures that the "Submit email messages to Virtual Analyzer" option is only available after ScanMail has successfully registered to the Virtual Analyzer server. - This version of ScanMail enables you to configure ScanMail to skip the URLs that cannot be accessed by Deep Discovery Analyzer. - This version of ScanMail only allows download from the Trend Micro official ActiveUpdate server, if no other download source was specified before the upgrade. 3. Documentation Set ======================================================================== o Readme.txt -- basic installation, known issues, release history and contact information o Administrator's Guide -- product overview, configuration instructions, and detailed information for managing the product environment. Electronic versions of the printed manuals are available at: http://docs.trendmicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx o Installation Guide -- A PDF document containing product requirements, deployment planning, installation instructions and other information intended to get you "up and running." o Online help -- Context-sensitive help screens that provide guidance for performing a task. 4. System Requirements ======================================================================== To install ScanMail with Microsoft Exchange Server 2013 Service Pack 1 or later versions, including Exchange Server 2016: Processor --------- - x64 architecture-based computer with Intel processor that supports Intel 64 architecture (formerly known as Intel EM64T) - AMD processor that supports the AMD64 platform Memory ------ - 1GB RAM (2GB RAM recommended) (Exclusively for ScanMail) Disk space ---------- - 5GB free disk space Operating System ---------------- - Windows Server 2016 Standard or Datacenter - Windows Server 2012 R2 Standard or Datacenter - Windows Server 2012 Standard or Datacenter - Windows Server 2008 R2 Standard with SP1 - Windows Server 2008 R2 Enterprise with SP1 Mail Server ----------- - Microsoft Exchange Server 2013 SP1 or later version - Microsoft Exchange Server 2016 Web Server ---------- - Microsoft Internet Information Services (IIS) 10.0 - Microsoft Internet Information Services (IIS) 8.5 - Microsoft Internet Information Services (IIS) 8.0 - Microsoft Internet Information Services (IIS) 7.5 Browser ------- - Microsoft Internet Explorer 7.0, 8.0, 9.0, 10.0, 11.0 - Mozilla Firefox 3.0 or later MSXML ------- MSXML 4.0 SP2 or above .NET Framework -------------- - .NET Framework 4.5 or later is required To install ScanMail with Microsoft Exchange Server 2010: Processor --------- - x64 architecture-based computer with Intel processor that supports Intel 64 architecture (formerly known as Intel EM64T) - AMD processor that supports the AMD64 platform Memory ------ - 1GB RAM (2GB RAM recommended) (Exclusively for ScanMail) Disk space ---------- - 5GB free disk space Operating System ---------------- - Microsoft Windows Server 2012 Standard or Datacenter - Microsoft Windows Server 2008 R2 with SP1 (64-bit) - Microsoft Small Business Server (SBS) 2011 Note: Microsoft Small Business Server (SBS) 2011 received limited compatibility testing with this version of ScanMail. The installation recommendation is to uninstall Microsoft ForeFront from Microsoft Small Business Server (SBS) 2011 prior to installing ScanMail. Mail Server ----------- - Microsoft Exchange Server 2010 SP3 or later version Web Server ---------- - Microsoft Internet Information Services (IIS) 8.0 - Microsoft Internet Information Services (IIS) 7.5 Browser ------- - Microsoft Internet Explorer 7.0, 8.0, 9.0, 10.0 and 11.0 - Mozilla Firefox 3.0 or later MSXML ------- MSXML 4.0 SP2 or above .NET Framework -------------- - .NET framework 3.5 SP1 required Additionally, this release fully supports: - .Net Framework 4.6.2 - Cumulative Update 7 for Exchange Server 2016 - Cumulative Update 17 for Exchange Server 2013 - SQL server 2016 5. Installation/Uninstallation ======================================================================== 5.1 Installation/Uninstallation Notes ===================================================================== - Before performing a fresh installation of Trend Micro ScanMail (for Microsoft Exchange), ensure that the following role services for Web Server (IIS) are installed: - CGI role service - Default Document - Static Content - IIS 6 Management Compatibility - This version of ScanMail supports remote and multi-server deployment. - This version of ScanMail automatically restarts the following services on Exchange Servers: - ScanMail for Microsoft Exchange Master Service - ScanMail for Microsoft Exchange Remote Configuration Server - ScanMail for Microsoft Exchange System Watcher - ScanMail EUQ Monitor - Microsoft Exchange Transport Service - IIS Admin Service - To install/uninstall this release, the minimum privilege required is local administrator and domain user. When using the Search & Destroy or manual scan functions, the Organization Management privilege is also required for the installation/uninstallation of this release. Note: The installing account requires "log on as batch" or "log on as service" rights after turning on User Account Control (UAC). - This version supports silent installation, refer to the Trend Micro ScanMail (for Microsoft Exchange) Installation Guide for more details. - Run Setup.exe and select Install. The framework automatically installs on the appropriate directory, copies files, and installs the database. The "Successfully completed" count increases upon completion of the installation - To uninstall this release, run Setup.exe and select uninstall. The framework automatically performs an uninstallation until the setup screen displays that the uninstallation was successful. Alternatively, uninstall the installation from the Control Panel. Refer to the Trend Micro ScanMail (for Microsoft Exchange) Installation Guide for detailed information. 6. Post-installation Configuration ======================================================================== - Add the ScanMail web console URL to the Trusted sites list and ensure that the browser settings have JavaScript enabled for this site. - For better performance, Trend Micro recommends disabling the built-in anti-malware protection available in Exchange Server 2013 and Exchange Server 2016. Note: Trend Micro recommends updating all components immediately after installing the product. 7. Troubleshooting ======================================================================== 7.1 Troubleshooting ScanMail Installations ===================================================================== If any problems are encountered while installing ScanMail, collect debug logs and send them to Trend Micro to assist in discovering the root cause of the issue. Perform the following steps to collect debug logs: 1. Open the folder %SYSTEMROOT%\temp (by default, c:\windows\temp) 2. Collect the following files and send them to Trend Micro: - instSetupHelper.log - MsiExec.log - RIFRemoteInstallAgent.log - ScanMail_exeCustomActionWrapper.log - ScanMail_exeInstallAgent.log - ScanMail_exeTMPatchLauncher.log - ScanMail_SetupUI.log - Setup.log - SMEX_MsiInstall-SMEX.log 3. Collect \SMEX_DatabaseCreation.log (by default, C:\Program Files\Trend Micro\Smex \SMEX_DatabaseCreation.log) 7.2 Troubleshooting While Using ScanMail ===================================================================== If problems are encountered while using ScanMail, collect debug logs and send them to Trend Micro to assist in discovering the root cause of the issue. The following steps enable debug logging: 1. Log on the ScanMail web console and click Administration -> Trend Support/Debugger. 2. Select all the modules and click the Apply button. 3. Reproduce the problem. 4. Go to the ScanMail installation folder (by default, C:\Program Files\Trend Micro\Smex) and open the debug folder. 5. Compress the folder and send to Trend Micro. 8. Known Issues ======================================================================== - N/A 9. Release History ======================================================================== ScanMail 10.0 for Microsoft Exchange December 2009 ScanMail 10.0 for Microsoft Exchange Service Pack 1 October 2010 ScanMail 10.2 for Microsoft Exchange September 2011 ScanMail 10.2 for Microsoft Exchange Service Pack 1 June 2012 ScanMail 10.2 for Microsoft Exchange Service Pack 2 December 2012 ScanMail 11.0 for Microsoft Exchange May 2013 ScanMail 11.0 for Microsoft Exchange Service Pack 1 February 2015 ScanMail 12.0 for Microsoft Exchange March 2016 ScanMail 12.0 for Microsoft Exchange Service Pack 1 November 2016 10. Contact Information ======================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of Trend Micro products can be downloaded from our website. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, United States, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 11. About Trend Micro ======================================================================== Trend Micro, Inc. provides centrally controlled server-based virus protection and content-filtering products and services. By protecting information that flows through Internet gateways, email servers, and file servers, Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2018, Trend Micro, the Trend Micro t-ball logo, and ScanMail are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 12. License Agreement ======================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license Third-party licensing agreements can be viewed: - By referring to the file "Third-party_licensing_agreements.doc"