<> Trend Micro, Inc. March 15, 2017 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) (for Microsoft(TM) Exchange) Version 12.0 Service Pack 1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Note: This readme file was current as of the date above. However, all customers are advised to check the Trend Micro website for documentation updates at: http://docs.TrendMicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: http://olr.TrendMicro.com/ Contents =================================================================== 1. About ScanMail for Microsoft Exchange 1.1 Overview of this Release 1.2 Who Should Install this Release 2. What's New 2.1 New Features and Enhancements in 12.0 Service Pack 1 2.2 Resolved Issues 3. Documentation Set 4. System Requirements 5. Installation/Uninstallation 5.1 Installation Notes 6. Post-installation Configuration 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ScanMail for Microsoft Exchange ======================================================================== ScanMail protects Exchange Server 2016, Exchange Server 2013, and Exchange Server 2010. Use the ScanMail installation program to quickly install ScanMail to one or more, local or remote, Exchange servers. Once installed, ScanMail can protect your servers in real time against viruses/malware, Trojans, worms, and spyware/grayware. ScanMail sustains business and network integrity by screening out spam messages and messages containing undesirable or unwanted content. ScanMail monitors and protects sensitive information that is travelling across your network. 1.1 Overview of this Release ===================================================================== Service Pack 1 introduces new features that support monitoring advanced threats and URL analysis by integrating Trend Micro Deep Discovery Analyzer. This service pack also enables you to bypass malware protection while resending quarantined messages. You can save the message subject and body to reuse while resending quarantined messages. 1.2 Who Should Install this service pack ===================================================================== Administrators currently running ScanMail (for Microsoft Exchange) 12.0 or 12.0 Patch 1 should install this service pack. 2. What's New ======================================================================== 2.1 New Features and Enhancements in 12.0 Service Pack 1 ===================================================================== This service pack includes the following new features and enhancements: 2.1.1 Support monitoring advanced threats ===================================================================== This version of ScanMail allows administrator to monitor advanced threats scanning without affecting email traffic. These advanced threats detected by Trend Micro Deep Discovery Analyzer server can be viewed in logs on ScanMail administration console. 2.1.2 Sender Approved List for Virtual Analyzer configuration ===================================================================== This version of ScanMail provides the ability to create sender approved list on Virtual Analyzer configuration screen. Messages from senders in the approved list will not be analyzed by Trend Micro Deep Discovery Analyzer server. 2.1.3 Support URL sandboxing ===================================================================== This version of ScanMail provides the ability to submit the URLs that have not been assessed by Trend Micro Web Reputation Service to Virtual Analyzer server for further analysis. The Virtual Analyzer settings, such as Virtual Analyzer mode, traffic direction, message sender approved list, target recipients and security level settings are still applicable to URL sandboxing feature. 2.1.4 Bypass malware protection for resending message ===================================================================== This version of ScanMail allows administrators to resend messages without ScanMail malware protection. 2.1.5 Save message subject and body to reuse later ===================================================================== This version of ScanMail provides the ability to save the subject and body while resending a quarantined message as new. You can reuse the saved message subject and body to send messages later. 2.1.6 Product Enhancements ===================================================================== 1. Installation - This version of ScanMail installation supports upgrade from previous version that connects with its database using Windows authentication. 2. Ransomware visibility - This version of ScanMail provides separate information about ransomware on the Summary screen, and also in ScanMail logs and reports. 3. Virtual Analyzer integration - This version of ScanMail reduced the false positive when connection between ScanMail and Deep Discovery Analyzer server is not reachable. 4. Data Loss Prevention - This version of ScanMail reduced the false positive of Data Loss Prevention filter. 5. Spam Logs - This version of ScanMail supports sending its spam logs to Trend Micro Control Manager. 6. Content Filtering - This version of ScanMail enhanced the Regular Expression of Content Filtering to scan hyperlink in HTML format message. 7. Generic Macro Notification - This version of ScanMail enables notification if any generic macro detected. To enable this feature, add the following registry key: * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\CurrentVersion * Key: EnableNotificationForAllMacro * Type: REG_DWORD * Data value: "1" = Send notification when generic macro is detected "0" = Do not send notification when generic macro is detected Note: - After adding the registry key, restart the "ScanMail for Microsoft Exchange Master Service" to activate the configuration settings. 8. Attachment Blocking - This version of ScanMail increased the size of attachment types and attachment names on Attachment Blocking page. 9. ScanMail Web Site - This version of ScanMail will remove HTTP access from its virtual Web site if both HTTP and HTTPS are bound. 2.2 Resolved Issues ===================================================================== This Service Pack includes all fixes resolved in ScanMail 12.0. It also includes the following new resolved issues: 2.2.1 When ScanMail extracts a "#" from the "href" HTML tag of an email message, it treats the "#" as a URL and sends it to the TMUFE engine for analysis. The engine may then tag the "#" as suspicious URL. 2.2.2 The quarantine path of ScanMail Web Reputation filter will be copied to target ScanMail server(s) when do configuration replication from Trend Micro Control Manager. 2.2.3 Files with .ODS extensions will be blocked by Attachment Blocking filter if enabled the option "Block attachment types or names within compressed files". 2.2.4 Attachment Blocking filter will not block attachment if files compressed inside folders. 2.2.5 Email Reputation filter might not work properly if there are lots of recipients. 2.2.6 Web Reputation filter might run to unexpected status if the URL length is very long. 2.2.7 Server Management cannot replicate the notification resend configuration between different ScanMail servers. 3. Documentation Set ======================================================================== o Readme.txt -- basic installation, known issues, release history and contact information o Administrator's Guide -- product overview, configuration instructions, and detailed information for managing the product environment. Electronic versions of the printed manuals are available at: http://docs.trendmicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx o Installation Guide -- A PDF document containing product requirements, deployment planning, installation instructions and other information intended to get you "up and running." o Online help -- Context-sensitive help screens that provide guidance for performing a task. 4. System Requirements ======================================================================== There are no changes to the system requirements in the ScanMail (for Microsoft Exchange) 12.0 readme file. Additionally, this servive pack fully supports: - Windows Server 2016 - .Net Framework 4.6.2 - Cumulative Update 4 for Exchange Server 2016 - SQL server 2016 5. Installation/Uninstallation ======================================================================== This section explains key steps for installing. - This Service Pack supports remote and multi-server deployment. - This version of ScanMail automatically restarts the following services on Exchange Servers: - ScanMail (for Microsoft Exchange) Master Service - ScanMail (for Microsoft Exchange) Remote Configuration Server - ScanMail (for Microsoft Exchange) System Watcher - ScanMail EUQ Monitor - Microsoft Exchange Transport - MOM service - HealthService service - To install or uninstall this service pack, you must have at least local administrator and domain user privileges. Note: The installing account requires "log on as batch" or "log on as service" rights after turning on User Account Control (UAC). 5.1 Installing =================================================================== To install: 1. Log on using an account with local administrator and domain user privileges. 2. Run "Setup.exe" and select "Install". The framework automatically installs the Service Pack to the appropriate directory, replaces the outdated files, and updates the database. The "Successfully completed" count increases upon the completion of the installation. 3. Clear the browser cache and re-launch the browser. 5.2 Uninstalling =================================================================== To roll back to the previous build: - run "setup.exe" and select "uninstall"; or - run "uninstall.bat" in the following Service Pack folder: {SMEX_HOME}\Service Pack\ScanMail 12.0 Service Pack 1\Uninstall The framework automatically rolls back to the previous build and a confirmation message indicating a successful uninstallation is displayed on the setup screen. 6. Post-installation Configuration ======================================================================== No special post-installation steps are required. Refer to the Trend Micro ScanMail (for Microsoft Exchange) 12.0 Service Pack 1 Installation Guide for more information. Note: Trend Micro recommends that updating all components immediately after installing the product. 7. Known Issues ======================================================================== N/A 8. Release History ======================================================================== ScanMail 10.0 for Microsoft Exchange December 2009 ScanMail 10.0 for Microsoft Exchange Service Pack 1 October 2010 ScanMail 10.2 for Microsoft Exchange September 2011 ScanMail 10.2 for Microsoft Exchange Service Pack 1 June 2012 ScanMail 10.2 for Microsoft Exchange Service Pack 2 December 2012 ScanMail 11.0 for Microsoft Exchange May 2013 ScanMail 11.0 for Microsoft Exchange Service Pack 1 February 2015 ScanMail 12.0 for Microsoft Exchange March 2016 9. Contact Information ======================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.TrendMicro.com Evaluation copies of Trend Micro products can be downloaded from our website. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, United States, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ======================================================================== Trend Micro, Inc. provides centrally controlled server-based virus protection and content-filtering products and services. By protecting information that flows through Internet gateways, email servers, and file servers, Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2016, Trend Micro, the Trend Micro t-ball logo, and ScanMail are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ======================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license Third-party licensing agreements can be viewed: - By referring to the file "Third-party_licensing_agreements.doc"