<<<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>>>


  Trend Micro, Inc.                                   December 14, 2012
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Trend Micro(TM) ScanMail(TM) (for Microsoft(TM) Exchange(TM)) 10.2
                      Service Pack 2 
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  Note: This readme file was current as of the date above. However, all
        customers are advised to check the Trend Micro website for
        documentation updates at:

       
        http://docs.trendmicro.com/en-us/enterprise/
        scanmail-for-microsoft-exchange.aspx


        Register online with Trend Micro within 30 days of installation
        to continue downloading new pattern files and product updates
        from the Trend Micro website.  Register during installation or
        online at:

        http://olr.trendmicro.com/


     Contents
     ===================================================================
     1.  About ScanMail for Microsoft Exchange
         1.1 Overview of this Release
         1.2 Who Should Install this Release
     2.  What's New
         2.0 New Features and Enhancements in 10.2 Service Pack 2 
         2.1 New Features and Enhancements in 10.2 Service Pack 1
         2.2 Resolved Issues
     3.  Documentation Set
     4.  System Requirements
     5.  Installation/Uninstallation
         5.1 Installation Notes
     6.  Post-installation Configuration
     7.  Known Issues
     8.  Release History
     9.  Contact Information
     10. About Trend Micro
     11. License Agreement
     ===================================================================


1. About ScanMail for Microsoft Exchange 
========================================================================

   ScanMail protects Exchange Server 2010, Exchange Server 2007, and
   Exchange Server 2003. Use the ScanMail installation program to
   quickly install ScanMail to one or more, local or remote, Exchange
   servers. Once installed, ScanMail can protect your servers in real
   time against viruses/malware, Trojans, worms, and spyware/grayware.
   ScanMail sustains business and network integrity by screening out
   spam messages and messages containing undesirable or unwanted
   content.ScanMail monitors and protects sensitive information that
   is travelling across your network.


   1.1 Overview of this Release
   =====================================================================

   Service Pack 2 introduces new features to support message searching
   in Exchange 2010 environments and a new scan engine capable of 
   scanning for advanced threats, such as advanced persistent threats. 
   Service Pack 2 also includes all the new features and enhancements
   introduced in ScanMail 10.2 Service Pack 1.

   
   1.2 Who Should Install this Release
   =====================================================================

   You should install this Service Pack if you are currently running
   ScanMail for Microsoft Exchange 10.2 or 10.2 Service Pack 1.



2. What's New
========================================================================

   2.0 New Features and Enhancements in 10.2 Service Pack 2
   =====================================================================

   This service pack includes the following new features and
   enhancements:


   2.0.1 Advanced Threat Prevention
   ====================================================================

   This version of ScanMail integrates the Advanced Threat Scan Engine
   (ATSE) and the Trend Micro Deep Discovery Advisor server to provide 
   the latest protection against advanced threats.
     
   Note: The ATSE and Deep Discovery Advisor integrations only support 
         servers running Exchange 2007 and Exchange 2010. 

   
   2.0.2 Search and Destroy 
   ====================================================================

   This version of ScanMail provides the capability to search and remove
   messages in Exchange 2010 mailbox servers. 
   
   Note: The Search and Destroy feature only provides support for mailbox 
         servers running Exchange 2010 Service Pack 1 or above. 

   To use the Search and Destroy feature in ScanMail 10.2 Service Pack 2, 
   manually add a user to the Search & Destroy administrator group using 
   Access Control (Administration > Access Control). Log on to ScanMail 
   using this account to use the Search & Destroy feature.


   2.0.3 Product Enhancements
   =====================================================================
   1. ScanMail provides the capability not take actions for password-
      protected Office files. 

      To skip actions for password-protected Office files, add the 
      following registry key: 
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  BypassPasswordProtectedOfficeFiles
           * Type: REG_DWORD
           * Data value: 1
  
      Note: After adding the registry key, restart the "ScanMail for 
            Microsoft Exchange Master Service" to activate the 
            configuration settings.
     

   2.1 New Features and Enhancements in 10.2 Service Pack 1
   =====================================================================

   This service pack includes the following new features and
   enhancements:

   2.1.1 Enhanced Data Loss Prevention
   ====================================================================

   This version of ScanMail provides enhanced Data Loss Prevention 
   capabilities. Administrators can now create customized data 
   identifiers (expressions and keyword lists) or select from a greatly 
   expanded selection of more than a hundred new predefined templates and
   data identifiers.


   2.1.2 Web Reputation - Approved Senders List
   =====================================================================

   Administrators can exempt users from web reputation queries by adding
   trusted users to the approved senders list.


   2.1.3 Web Reputation - Quarantine entire message
   =====================================================================

   Administrators can select to enable the "Quarantine entire message" 
   action for email messages which contain suspicious URLs. These 
   messages are quarantined on the local server.


   2.1.4 IPv6 Support
   =====================================================================

   ScanMail provides full support for IPv6 environments.


   2.1.5 Policy Management from Control Manager 6.0
   =====================================================================

   Trend Micro Control Manager 6.0 allows administrators to create and 
   deploy Data Loss Prevention policies to the ScanMail for Microsoft 
   Exchange servers that Control Manager manages.
  

   2.1.6 Product Enhancements
   =====================================================================

   1. More detailed information about suspicious messages and where the 
      messages were scanned and detected is now available.

      For example, log queries and notifications provide a "Found in" 
      feature that displays the detailed information.

   2. To improve scanning performance, ScanMail skips store level 
      scanning for messages located in the "deleted items" and 
      "recoverable items" folders.

      To skip store level scanning on the "deleted items" and "recoverable
      items" folders, add the following registry key: 
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  SkipScanDeletedRecoverableFolder
           * Type: REG_DWORD
           * Data value: 1

      Note: After adding the registry key, restart the "ScanMail for 
            Microsoft Exchange Master Service" to activate the configuration 
            settings.

   3. ScanMail (for Microsoft Exchange) can be set to download the Virus 
      Scan Engine from a specific ActiveUpdate server and still update all 
      the other engines and patterns from the Trend Micro global official
      ActiveUpdate server.

      To set up the server URL, add the following registry key: 
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  AlternativeVSAPIAUURL
           * Type: REG_SZ

   4. Users can change the header of the notification subject to something 
      other than the default value of "MailServer Notification".
       
      To change the string, add the following registry key: 
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  NotificationSubjectPrefix
           * Type: REG_SZ

   5. Users can change the scheduled update interval from 15 minutes to 10 
      minutes.
        
      To set up the new update interval, add the following registry key: 
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  EnableAUTenMinutesInterval
           * Type: REG_DWORD
           * Data value: 1 


   2.2 Resolved Issues
   =====================================================================
   
   2.2.1  Resolved Issues in Service Pack 2
   =====================================================================

    1. To improve system stability, this version updates the implementation
       mechanism in "hookVsapi.dll" which may cause the Microsoft Exchange
       Information Store service (store.exe) to stop unexpectedly  when 
       closing an event handle.

    2. In an Exchange Server Cluster Continuous Replication (CCR) 
       environment, Service Pack 2 does not record changes to the log and
       report databases when the ScanMail databases are installed on a 
       remote SQL server. 
	
    3. When the "Disable sender notification for spoofing mails"  option in 
       the "Notification configuration" page of the Security Risk Scan 
       filter is enabled, notification email messages can be sent to the
       sender of an unscannable message.
	   
    4. Service Pack 2 permits ScanMail to perform attachment blocking 
       scanning on quarantined spam email messages.

       To enable scanning on quarantined spam email messages, add the 
       following registry key:
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  EnableSpamMailAttachmentBlocking
           * Type: REG_DWORD
           * Data value: 1
	 
    5. Service Pack 2 provides an enhanced installation on Exchange 2007.
       Service Pack 2 can be installed successfully on Exchange 2007 
       servers if some Exchange 2010 tools are installed on the Exchange 
       2007 server. 

    6. Service Pack 2 provides an option to configure ScanMail to use
       the Exchange Web Services (EWS) API instead of the Microsoft
       Collaborative Data Objects (CDO) API. Enabling ScanMail to use
       the EWS API ensures that it can send quarantined emailmessages
       to external recipients.

       To use the Exchange Web Services (EWS) to send quarantined email
       messages, add the following registry key:
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  ResendSwitchCdoToEws
           * Type: REG_DWORD
           * Data value: 1

       Note: After adding the registry key, restart the "ScanMail for 
       Microsoft Exchange Master Service" to activate the configuration 
       settings.
  

   2.2.2  Resolved Issues in Service Pack 1
   =====================================================================

   1. Service Pack 1 permits ScanMail to remove the "Suspicious URL" tag 
      attached to the subject of email messages quarantined in the user's
      spam folder.

         To enable the removal of the "Suspicious URL" tag, add the 
         following registry key:
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  RemoveSuspiciousURLTag
           * Type: REG_DWORD
           * Data value: 1

   2. When users perform spam maintenance on an Exchange 2010 server, 
      Service Pack 1 does not re-create the approved senders list unless 
      necessary. 

   3. Service Pack 1 performs an enhanced URL normalization before sending
      suspicious URL queries to the Smart Scan Network or Smart Scan Server. 

   4. Service Pack 1 skips the scanning of the offline address book (OAB) 
      folders.

   5. Service Pack 1 displays Exchange 2003, Exchange 2007, and Exchange 
      2010 servers in one Exchange organization on the Server Management 
      console. 

   6. Service Pack 1 permits the setup of a "User-Agent string" for online
      updates of the Product Registration.
  
         To set up the string, add the following registry key:
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  UserAgentStringOfPR
           * Type: REG_SZ
           * Data value:(user-agent string,such as:Mozilla/10.0 
             (compatibile:MSIE 9.0;Windows 7))

   7. Service Pack 1 allows users to set the frequency of the database
      configuration backup task in a Microsoft(TM) Exchange(TM) 2007 
      Cluster Continuous Replication (CCR) environment. 
      
         To set the frequency of the database configuration backup task,
         add the following registry key:
           * Path: HKLM\SOFTWARE\TrendMicro\ScanMail for Exchange\
                   CurrentVersion
           * Key:  CCRConfMonitorInterval
           * Type: REG_DOWRD
           * Data value: (decimal value in seconds)
             (Default value will be 3600 seconds) 
             

         Note: After adding the registry key, restart the "ScanMail for 
         Microsoft Exchange Master Service" to activate the configuration 
         settings.

   
3. Documentation Set
========================================================================
   o Readme.txt -- basic installation, known issues, release history
     and contact information

   o Administrator's Guide -- product overview, configuration
     instructions, and detailed information for managing the product
     environment.

     Electronic versions of the printed manuals are available at:
     http://docs.trendmicro.com/en-us/enterprise/
     scanmail-for-microsoft-exchange.aspx

   o Installation Guide -- A PDF document containing product 
     requirements, deployment planning, installation instructions
     and other information intended to get you "up and running."

   o Online help -- Context-sensitive help screens that provide guidance
     for performing a task.


4. System Requirements
========================================================================
         To install ScanMail with Microsoft Exchange Server 2010:

            Processor
            ---------
            - x64 architecture-based processor that supports Intel Extended
              Memory 64 Technology (Intel EM64T)
            - x64 architecture-based computer with AMD 64-bit processor
              that supports AMD64 platform

            Memory
            ------
            - 1GB RAM (2GB RAM recommended)
              (Exclusively for ScanMail)

            Disk space
            ----------
            - 2GB free disk space

            Operating System
            ----------------
            - Microsoft Windows Server 2008 with Service Pack 2 (64-bit)
            - Microsoft Windows Server 2008 R2 with Service Pack 1 (64-bit)
            - Microsoft Windows Server 2008 R2 (64-bit)
            - Microsoft Small Business Server (SBS) 2011

            Note: Microsoft Small Business Server (SBS) 2011 received
                  limited compatibility testing with this version of
                  ScanMail. The installation recommendation is to uninstall  
                  Microsoft ForeFront from Microsoft Small Business Server
                  (SBS) 2011 prior to installing ScanMail.

            Mail Server
            -----------	
            - Microsoft Exchange Server 2010 with Service Pack 2
            - Microsoft Exchange Server 2010 with Service Pack 1
            - Microsoft Exchange Server 2010

            Web Server
            ----------
            - Microsoft Internet Information Services (IIS) 7.5
            - Microsoft Internet Information Services (IIS) 7.0

            Browser
            -------
            - Microsoft Internet Explorer 6.0, 7.0, 8.0, and 9.0
              (Compatibility view is suggested) 
            - Mozilla Firefox 3.0 or later
			
            MSXML 
            -------
            MSXML 4.0 SP2 or above 


          To install ScanMail with Microsoft Exchange Server 2007:

            Processor
            ---------
            - x64 architecture-based processor that supports Intel Extended
              Memory 64 Technology (Intel EM64T)
            - x64 architecture-based computer with AMD 64-bit processor
              that supports AMD64 platform

            Memory
            ------
            - 1GB of RAM (2GB RAM recommended)
              (Exclusively for ScanMail)

            Disk space
            ----------
            - 2GB free disk space

            Operating System
            ----------------
            - Microsoft Windows Server 2008 with Service Pack 2 (64-bit)
            - Microsoft Windows Server 2008 R2 with Service Pack 1 (64 bit)
            - Microsoft Windows Server 2008 R2 (64 bit)
            - Microsoft Windows Small Business Server 2008 (64 bit)

            Note: Microsoft Small Business Server (SBS) 2008 received
                  limited compatibility testing with this version of
                  ScanMail. The installation recommendation is to uninstall  
                  Microsoft ForeFront from Microsoft Small Business Server
                  (SBS) 2008 prior to installing ScanMail.

            - Microsoft Windows Server 2003 R2 with Service Pack 2 (64-bit)
            - Microsoft Windows Server 2003 with Service Pack 2 (64-bit)

            Mail Server
            -----------
            - Microsoft Exchange Server 2007 with Service Pack 3
            - Microsoft Exchange Server 2007 with Service Pack 2
            - Microsoft Exchange Server 2007 with Service Pack 1

            Web Server
            ----------
            - Microsoft Internet Information Services (IIS) 7.0
            - Microsoft Internet Information Services (IIS) 6.0

            Browser
            -------
            - Microsoft Internet Explorer 6.0, 7.0, 8.0, and 9.0
              (Compatibility view is suggested) 
            - Mozilla Firefox 3.0 or later

            MSXML 
            -------
            MSXML 4.0 SP2 or above 


          To install ScanMail with Microsoft Exchange Server 2003:

            Processor
            ---------
            - Intel(TM) Pentium II 266 MHz or higher processor
              (Intel Pentium or compatible 733MHz processor recommended)

            Memory
            ------
            - 1GB RAM (2GB RAM recommended)
              (Exclusively for ScanMail)

            Disk space
            ----------
            - 2GB free disk space

            Operating System
            ----------------
            - Microsoft Windows Server 2003 with Service Pack 2 (32-bit)
            - Microsoft Windows Server 2003 R2 with Service Pack 2 (32-bit)

            Mail Server
            -----------
            - Microsoft Exchange Server 2003 with Service Pack 2

            Web Server
            ----------
            - Microsoft Internet Information Services (IIS) 7.0
            - Microsoft Internet Information Services (IIS) 6.0

            Browser
            -------
            - Microsoft Internet Explorer 6.0, 7.0, 8.0, and 9.0
              (Compatibility view is suggested) 
            - Mozilla Firefox 3.0 or later
			
            MSXML 
            -------
            MSXML 4.0 SP2 or above 


          To integrate with Trend Micro Products:

            Trend Micro Control Manager
            ---------------------------
            - Trend Micro Control Manager 5.0 with Patch 7 and Hotfix 2108
            - Trend Micro Control Manager 5.5 with Service Pack 1
            - Trend Micro Control Manager 6.0 

            Smart Protection Server
            -----------------------
            - Smart Protection Server 2.0
            - Smart Protection Server 2.1
            - Smart Protection Server 2.5
            - OSCE Server Intergrated Smart Scan Server

            Deep Discovery Advisor Server
            -----------------------------
            - Deep Discovery Advisor Server 2.92 or later


5. Installation/Uninstallation
========================================================================
   5.1 Installation/Uninstallation Notes
   =====================================================================
   - This Service Pack can be used for Normal and Cluster servers

   - This Service Pack supports remote and multi-server deployment

   - This Service Pack automatically restarts the following services
     on both Normal and Cluster Servers:
       - ScanMail for Microsoft Exchange Master Service
       - ScanMail for Microsoft Exchange Remote Configuration Server
       - ScanMail for Microsoft Exchange System Watcher
       - ScanMail EUQ Monitor
       - Microsoft Exchange Transport Service
       - IIS Admin Service
       - MOM service
       - HealthService service

   - To install/uninstall this Service Pack, the minimum privilege required
     is local administrator and domain user.
  
   - This version supports silent installation, refer to the Trend Micro 
     ScanMail (for Microsoft Exchange) 10.2 Service Pack Installation and
     Upgrade Guide for more details.

   - Run Setup.exe and select Install. The framework automatically
     installs on the appropriate directory, replaces outdated files,
     and updates the database. The "Successfully completed" count increases
     upon completion of the installation

   - To uninstall this Service Pack, run Setup.exe and select uninstall.
     The framework automatically rolls back until the setup screen
     displays that the uninstallation was successful.

     Refer to the Trend Micro ScanMail (for Microsoft Exchange) 10.2 Service
     Pack Installation and Upgrade Guide for detailed information.


6. Post-installation Configuration
========================================================================
   No special post-installation steps are required. Refer to the Trend
   Micro ScanMail (for Microsoft Exchange) 10.2 Service Pack Installation
   and Upgrade Guide for more information.

   Note: Trend Micro recommends that updating all components immediately 
         after installing the product.


7. Known Issues
========================================================================
  1.SMEX may send out security risk scan notification which content includes
    "Suspicious Content has been detected", there will be the following 
    event which will trigger this notification: 
    a. SMEX can't get response from Deep Discovery Advisor server before 
    the wait time
    b. Advanced threat scan engine can't detect the violation but the 
    Deep Discovery Advisor server returned a violated security risk level 

  2.With this Service Pack, Data Loss Prevention logs cannot be sent to 
    Control  Manager 5.5 SP1 or earlier versions. Data Loss Prevention 
    log sending is currently supported by Control Manager 6.0


8. Release History
========================================================================
   ScanMail 10.0 for Microsoft Exchange                    December  2009
   ScanMail 10.0 for Microsoft Exchange Service Pack 1     October   2010
   ScanMail 10.2 for Microsoft Exchange                    September 2011
   ScanMail 10.2 for Microsoft Exchange Service Pack 1     June      2012


9. Contact Information
==========================================================================
   A license to the Trend Micro software usually includes the right to
   product updates, pattern file updates, and basic technical support
   for one (1) year from the date of purchase. After the first year,
   Maintenance must be renewed on an annual basis at Trend Micro's
   then-current Maintenance fees.

   You can contact Trend Micro via fax, phone, and email, or visit us at:

   http://www.trendmicro.com

   Evaluation copies of Trend Micro products can be downloaded from our
   website.

   Global Mailing Address/Telephone Numbers
   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   For global contact information in the Asia/Pacific region, Australia
   and New Zealand, Europe, Latin America, United States, and Canada,
   refer to:

   http://www.trendmicro.com/en/about/overview.htm

   The Trend Micro "About Us" screen displays. Click the appropriate
   link in the "Contact Us" section of the screen.

   Note: This information is subject to change without notice.


10. About Trend Micro
==========================================================================
   Trend Micro, Inc. provides centrally controlled server-based virus
   protection and content-filtering products and services. By protecting
   information that flows through Internet gateways, email servers, and
   file servers, Trend Micro allows companies worldwide to stop viruses
   and other malicious code from a central point before they can reach
   the desktop.

   Copyright 2012, Trend Micro, the Trend Micro t-ball logo, and 
   ScanMail are trademarks of Trend Micro Incorporated and are registered 
   in some jurisdictions. All other marks are the trademarks or registered
   trademarks of their respective companies.


11. License Agreement
==========================================================================
   Information about your license agreement with Trend Micro can be
   viewed at:

   http://www.trendmicro.com/en/purchase/license

   Third-party licensing agreements can be viewed:
   - By referring to the file "Third-party_licensing_agreements.txt"