<> Trend Micro Incorporated January 31, 2019 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) for IBM Domino(TM) Version 5.8, Build 1024, GM Release ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: This Readme file was current as of the date above. However, all customers are advised to check Trend Micro's website for documentation updates at: http://docs.trendmicro.com TIP: Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: https://clp.trendmicro.com/FullRegistration?T=TM Contents ===================================================================== 1. About ScanMail for IBM Domino 2. What's New 3. Documentation Set 4. System Requirements 5. Installation and Upgrade 5.1 Using Trend Micro Control Manager to Manage ScanMail 6. Post-Installation Configuration 6.1 Register and Activate ScanMail 6.2 Start/Restart the Domino Server 6.3 Test Installation with EICAR 6.4 Update Components Manually 6.5 Scan Databases Manually 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ScanMail for IBM Domino (SMID) ======================================================================== Trend Micro ScanMail for IBM Domino works in real time to prevent viruses, malicious code, and unwanted content from entering your Domino environment via email, replication, or infected documents. Malware scanning is performed in memory, which significantly increases the scanning speed. ScanMail offers flexible, scalable configuration and remote management through the Notes workspace, as well as Web access of ScanMail databases. ScanMail is fully compatible with Trend Micro Control Manager(TM), Trend Micro centralized management console that lets you consolidate antivirus and content security protection into a cohesive solution. 2. What's New ======================================================================== 2.1 Latest Platform Support ==================================================================== This version of ScanMail supports the latest IBM(TM) Domino(TM) 10 and 10.0.1. 2.2 Visual Studio 2015 Support (For Windows Platform Only) ==================================================================== This version of ScanMail supports Visual Studio 2015. 2.3 Comply with General Data Protection Regulation (GDPR) ==================================================================== This version of ScanMail complies with the European regulation, General Data Protection Regulation (GDPR). 2.4 Masking for Protected Content ==================================================================== This version enables ScanMail for IBM Domino to mask the protected contents in the subject or mail body of an email message that triggers the Data Loss Prevention (DLP) filter when the "Mask content and pass" action is enabled. 2.5 Advanced File Information (AFI) in Advanced Threat Scan Engine ==================================================================== This version allows users to enable ScanMail for IBM Domino to use ATSE Advanced File Information (AFI) to retrieve the file information of executable files, macro files, and script files (VBE, VBS, JS, JSE, WSF, PS1) that were not virus scanned by the engine, and then send these files to Trend Micro Deep Discovery Advisor. 2.6 Enhanced Deep Discovery Advisor Settings ==================================================================== This version adds the following settings in the Deep Discovery Advisor Settings for communicating with the Deep Discovery Advisor: - Maximum wait time for analysis ratings - Action on unanalyzed risks This version allows users to enable the following two options under the Default Mail Scan > Scan Options > APT Prevention Filter > Scan Settings > Select attachments to scan setting, simultaneously: - Suspicious files detected by Advanced Threat Scan Engine - Files with specified type 2.7 Enhanced Advanced Threat Scan Engine (ATSE) ==================================================================== This version of ScanMail supports the following new feature of the Advanced Threat Scan Engine (ATSE): - aggressive rules level (ATSE 9.750.1016 and higher builds) 2.8 Enhanced Web Reputation Service (WRS) ==================================================================== This version of ScanMail enables the Web Reputation Service (WRS) to support the "Ransomware" category. This ensures ScanMail for IBM Domino can detect hyperlinks that contain ransomware and record these information in the log database. 2.9 Latest Deep Discovery Advisor Support ==================================================================== This version of ScanMail supports Deep Discovery Analyzer 6.0 servers. 2.10 New Malware Naming Convention ==================================================================== This version supports the new malwre naming convention to help with the proper identification of ransomware components. 2.11 Web Reputation Service (WRS) Category Information to Trend Micro Control Manager (TMCM) ==================================================================== This version adds the WRS category information in security logs that ScanMail for IBM Domino sends to Trend Micro Control Manager. 2.12 Updated Data Loss Prevention (DLP) Template ==================================================================== This version updates the Data Loss Prevention (DLP) template to version 3.1.1005 to add the "My number" template. 3. Documentation Set ======================================================================== The documentation set for this product includes: - Readme.txt -- version enhancements, basic installation, known issues, and release history. - Help Database -- Comprehensive help screens that provide guidance for performing tasks. - Administrator's Guide -- product overview, installation planning, installation and configuration instructions, and detailed information for managing the product environment. Electronic versions of the printed manuals are available at: http://www.trendmicro.com/download/ - Knowledge Base -- a searchable database of problem-solving and troubleshooting topics. http://kb.trendmicro.com/solutions/ 4. System Requirements ======================================================================== ScanMail for IBM Domino requires the following hardware and software specifications on the servers where it is installed: - Lotus(TM) Domino(TM) 64-bit 8.5.0, 8.5.1, 8.5.2, and 8.5.3 - IBM(TM) Domino(TM) 64-bit 9.0, 9.0.1, 10, 10.0.1 - Microsoft Windows 2008 Standard x64 Edition, Service Pack 2 - Microsoft Windows 2008 Enterprise x64 Edition, Service Pack 2 - Microsoft Windows Server 2008 R2 Standard x64 Edition - Microsoft Windows Server 2008 R2 Enterprise x64 Edition - Microsoft Windows 2008 R2 Service Pack 1 - Microsoft Windows 2012 Server Standard Edition - Microsoft Windows 2012 Server DataCenter Edition - Microsoft Windows 2012 Server R2 Standard Edition - Microsoft Windows 2012 Server R2 DataCenter Edition - Microsoft Windows 2016 Server Standard Edition - Microsoft Windows 2016 Server DataCenter Edition - Intel Pentium(TM) 4 processor or higher - 512-MB of memory; 1-GB recommended - 400-MB available disk space for program files; 100-MB available disk space on each partition; 680-MB available under the system default temporary folder during installation. - Internet access (for components download) Note: ScanMail for IBM Domino 5.8 does NOT support Domino 32-bit platform and windows 32-bit platform. 5. Installation and Upgrade ======================================================================== This section explains key steps for installing the software. Refer to the Administrator's Guide for detailed installation information. IMPORTANT: Shut down the Domino server before installing or removing ScanMail for IBM Domino. To install ScanMail for IBM Domino on a Windows server: 1) Do one of the following to navigate to the Setup program (setup.exe): - If you are installing from the Trend Micro Enterprise Protection CD, go to the ScanMail for IBM Domino folder on the CD. - If you have downloaded the software from the Trend Micro Web site, navigate to the relevant folder on your computer. 2) Double-click setup.exe. The InstallAnywhere Wizard screen appears, followed by the Welcome screen. 3) Click Next. The Software License Agreement screen appears. If you do not agree with the terms of the license, click "I do not accept the terms of the license agreement." The installation will then discontinue. Otherwise, click "I accept the terms of the license agreement." 4) Click Next. Setup checks the Product Activation screen. If the server has ScanMail 5.6 or ScanMail 5.6 Service Pack 1 installed, Setup will skip the Product Activation screen and proceed directly to the Domino Server screen. - From the Product Activation screen, you may enter an Activation Code to activate ScanMail or skip this screen and activate later using the Configuration Database. Do one of the following: - If you have not registered ScanMail: Go to the Trend Micro Product Registration Web site (https://olr.trendmicro.com/registration) and follow the on-screen instructions to register your product. Register your product to ensure eligibility to receive the latest security updates and other product and maintenance services. After registration is complete, Trend Micro will send a ScanMail Activation Code (AC) to the email address you specified during registration. Use this Activation Code to activate ScanMail. - If you have an Activation Code: Type the Activation Code for ScanMail. To use the full functionality of ScanMail 5.8, obtain a ScanMail Full or Suite with Data Protection Activation Code, and then activate the software. - If you do not have a Registration Key and Activation Code, or you want to activate later: Skip this screen. Setup will install ScanMail, however, the ScanMail scan and update task will not be loaded. Activate ScanMail immediately after installation to start the Domino environment protection. 5) Click Next. Setup extracts installation files to the local temporary directory and then proceeds to the Domino Server screen. 6) On the Domino Server screen, click Add to specify the target server notes.ini, including the partitioned servers, where ScanMail should be installed. Click Remove to delete a server from the list. Note: If the server has ScanMail 5.6 or ScanMail 5.6 Service Pack 1 installed, you cannot remove the server from the list, because ScanMail 5.8 installer will force ScanMail 5.6 or ScanMail 5.6 Service Pack 1 to upgrade to ScanMail 5.8. If you have a partitioned Domino server, install ScanMail on the partition you want to protect. Setup lists the existing ScanMail installation. 7) Click Next. The Domino Server Binary and Data Directories screen appears. Setup detects the Domino Binary and Data paths. If any of the paths are missing in the specified notes.ini file, double-click the empty item to specify the correct path. 8) Click Next. Setup analyzes the target server(s), checks for installed ScanMail information, and then displays the result. 9) Click Next. The Installation Path for ScanMail screen displays. Select the path to install ScanMail 5.8 that allows you to install multiple ScanMail binary for different Domino servers. 10) Click Next. The Database Replication Settings screen appears. Select which ScanMail databases Setup will enable for replication. Except for the Quarantine Database, Setup enables the replication of all ScanMail databases. If there are server(s) with ScanMail installed and the Configuration Database is being replicated, you may skip this option on subsequent installation. Note: Remember to schedule the replication of the Configuration Database after completing the installation to receive the default policy. 11) Click Next. The Default Policy Selection screen appears. Select which server(s) should get default policies. Note: A single ScanMail server or the first server should get the default policy. 12) Click Next. The ScanMail Administrator screen appears. Do one of the following: - Type a single administrator account / group that will have Manager access to all ScanMail databases. - Otherwise, if the target server(s) are partitioned server(s) and you have different administrator groups for each partition, specify different user(s) or user group(s) for each partitioned server. Then type the administrator account for each server in the Administrator column. 13) Click Next. The installation begins. 14) After the installation completes, the Successful Installation screen displays. 15) Click Next. The Introducing Control Manager Agent for SMID screen displays. Click Finish to close the Setup window. See Test Installation with EICAR in the next section to confirm whether ScanMail was successfully installed. Note: If you are using another antivirus product (like ServerProtect) on the Domino server where you plan to install ScanMail, be sure to configure that antivirus product to exclude from scanning ScanMail "smd" and temporary directories for each partition; otherwise, a scanning conflict may occur. Refer to the Administrator's Guide - Set Temporary Directories topic for details. Refer to the ServerProtect documentation for instructions to exclude Domino folders and directories from scanning. 5.1 Using Trend Micro Control Manager to Manage ScanMail ===================================================================== To manage ScanMail from a Control Manager management console, you must have any of the following releases applied on the Control Manager server: - Trend Micro Control Manager 5.5 with Service Pack 1 - Trend Micro Control Manager 6.0 - Trend Micro Control Manager 7.0 6. Post-Installation Configuration ======================================================================== After you have successfully installed ScanMail, Trend Micro recommends performing the following post-installation configuration steps. 6.1 Register and Activate ScanMail ===================================================================== Note: Skip this step if you have already activated ScanMail during installation. After you have successfully installed ScanMail, check the license status and expiration date on the Configuration Database, click Administration > License Information. If the status is not activated or is expired, obtain an Activation Code and then perform the following: a. Open the ScanMail Configuration Database. b. Click Administration > Product License. c. Create a license profile. d. Delete the old license profile. Refer to the Registering and Activating ScanMail topic in the Administrator's Guide or Help Database for details. 6.2 Start/Restart the Domino Server ===================================================================== Start/Restart the Domino server to load ScanMail real-time scan tasks. 6.3 Test Installation with EICAR ===================================================================== Trend Micro recommends testing ScanMail and confirming that it works by using the EICAR test file. To test the ScanMail installation with EICAR: a. Open an ASCII text file and copy the following 68-character string to it. X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* b. Save the file as eicar_test.com to a temp directory and then close it. c. Attach eicar_test.com to an email and send it to yourself or a test mailbox. d. Check the virus log in the ScanMail Log Database or notification sent to administrator (if Notification is set). 6.4 Update Components Manually ===================================================================== Use the Configuration Database to invoke on-demand antivirus and content security products update. To update components manually: a. Open the ScanMail Configuration Database. b. On the left-hand menu, click Actions > Manual Update. c. On the working area, click Edit. d. Select which component(s) to update. e. Set the update source. f. Configure proxy settings for component download. g. Define the update notification. h. Click Update Now. i. Click Save & Close to save the on-demand component update settings. 6.5 Scan Databases Manually ===================================================================== Use the Configuration Database to invoke manual database scanning. To scan databases manually: a. Open the ScanMail Configuration Database. b. From the left menu, click Actions > Manual Scan. c. From the working area, click Edit. d. Click the General tab to enable incremental scanning and specify the number of minutes that corresponds to the duration of the scan. e. Click the Databases to scan tab to choose which database(s) to scan: All databases: ScanMail scans all databases stored on the Domino server. Scan selected databases only: ScanMail scans specific database(s) based on the directory and database list. Exclude selected databases from scanning: ScanMail skips scanning of specified database(s). Click Add, Remove, or Remove All to manipulate the database(s) in the list. f. Click the Scan Options tab to set the following scan options: - Security Risk Scan - Scan Restrictions - Script Filter g. Define the notification template. h. Click Scan Now. i. Click Save & Close. 7. Known Issues ======================================================================== There are no known issues for this release. 8. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download Previous releases include the following: - ScanMail for Domino 3.0, July 1, 2005 - ScanMail for Domino 3.0 Service Pack 3, April 21, 2006 - ScanMail for Domino 3.0 Patch 4 for Service Pack 3, May 2, 2008 - ScanMail for Domino 5.0 October 29, 2010 - ScanMail for Domino 5.0 Patch 4, November 30, 2011 - ScanMail for Domino 5.0 Patch 5, September 18, 2012 - ScanMail for Lotus Domino 5.5, November 7, 2012 - ScanMail for Domino 5.0 Patch 6, April 26, 2013 - ScanMail for Lotus Domino 5.5 Patch 1, April 26, 2013 - ScanMail for IBM Domino 5.6, July 4, 2014 - ScanMail for IBM Domino 5.6 Service Pack 1, April 30, 2015 9. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. http://www.trendmicro.com/us/about-us/contact/index.html NOTE: This information is subject to change without notice. 10. About Trend Micro ======================================================================== Smart, simple, security that fits. As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2019, Trend Micro Incorporated. All rights reserved. Trend Micro, ScanMail, Control Manager, eManager, Data Loss Prevention, and the t-ball logo are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: www.trendmicro.com/us/about-us/legal-policies/license-agreements Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide