<<USE COURIER REGULAR 10 FONT IF YOU WOULD LIKE TO PRINT THIS DOCUMENT>>

  Trend Micro Incorporated                                   June 6, 2016

  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Trend Micro(TM) ScanMail(TM) (for Microsoft(TM) Exchange(TM)) 11.0
                        Patch 2 for Service Pack 1
                                 Build 4283
  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  
    NOTICE: This Readme file was current as of the date above. However,
            all customers are advised to check Trend Micro's website for
            documentation updates.

            GM release documentation:

            http://docs.trendmicro.com

            Patch/Service Pack release documentation: 
 
            http://www.trendmicro.com/download
        

   TIP:    Register online with Trend Micro within 30 days of 
           installation to continue downloading new pattern files and 
           product updates from the Trend Micro website. Register 
           during installation or online at:

           https://clp.trendmicro.com/FullRegistration?T=TM

     
     Contents
     ==========================================================

     1.  About ScanMail (for Microsoft Exchange) 11.0

         1.1 Overview of This Release

         1.2 Who Should Install This Release

     2.  What's New

         2.1 Enhancements 

         2.2 Resolved Known Issues

     3.  Documentation Set

     4.  System Requirements

     5.  Installation

         5.1 Installing

         5.2 Uninstalling

     6.  Post-Installation Configuration

     7.  Known Issues

     8.  Release History

     9.  Files Included in This Release

     10. Contact Information

     11. About Trend Micro

     12. License Agreement

     ==========================================================



  1. About ScanMail (for Microsoft Exchange) 11.0
  ======================================================================
     ScanMail protects Exchange Server 2013, Exchange Server 2010, and
     Exchange Server 2007. Use the ScanMail installation program to
     quickly install ScanMail to one or more, local or remote, Exchange
     servers. Once installed, ScanMail can protect your servers in real
     time against viruses/malware, Trojans, worms, and spyware/grayware.
     ScanMail sustains business and network integrity by screening out
     spam messages and messages containing undesirable or unwanted
     content. ScanMail monitors and protects sensitive information that
     is travelling across your network.
 

     1.1 Overview of This Release
     ===================================================================
     ScanMail (for Microsoft Exchange) 11.0 Patch 2 for Service Pack 1
     consolidates all solutions to issues resolved after the release of
     ScanMail (for Microsoft Exchange) 11.0 Service Pack 1 build.


     1.2 Who Should Install This Release
     ===================================================================
     You should install this Patch if you are currently running
     ScanMail (for Microsoft Exchange) 11.0 Service Pack 1 build.


  2. What's New
  ======================================================================
     Note: Please install the Patch before completing any procedures in
           this section (see "Installation").
 
     This patch addresses the following issues and includes the 
     following enhancement:
   

     2.1 Enhancements 
     =================================================================== 
     The following enhancements are included in this release:
  
     Enhancement 1: 
     [Hotfix 4273]    Suspicious Attachments - This Patch enables 
                      ScanMail (for Microsoft Exchange) to upload 
                      suspicious attachments to the Trend Micro Deep 
                      Discovery Advisor server for analysis separately. 
                      ScanMail previously compressed all attachments  
                      (whether suspicious or not) into one file and 
                      uploaded the compressed file to the Deep Discovery 
                      Advisor server for analysis.

     Enhancement 2: 
     [Hotfix 4273]    Executable and Scripted Files - This Patch enables 
                      ScanMail (for Microsoft Exchange) to send 
                      executable and scripted files that are not 
                      detected by the scan engine to the Deep Discovery 
                      Advisor server for analysis.

     Enhancement 3: 
     [Hotfix 4278]    Spam Logs - This Patch enables ScanMail (for 
                      Microsoft Exchange) to save spam logs in its 
                      database temporarily when it uploads spam logs to 
                      Trend Micro Control Manager(TM). Users can
                      configure the frequency at which ScanMail deletes 
                      spam logs from the database which is set to every 
                      12 hours by default.                  
                    
     Procedure 3:     To configure the frequency at which ScanMail 
                      deletes spam logs from the database:
                    
                      a. Install this Patch (see "Installation").
                    
                      b. Open the Registry Editor.
                    
                      c. Add or locate the following key and set the 
                         preferred value:
                    
                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                                Exchange\CurrentVersion
                         Key:  SpamMaintenanceInterval
                         Type: REG_DWORD
                         Data value: The frequency in hours that 
                                     ScanMail (for Microsoft Exchange) 
                                     cleans spam logs from the database, 
                                     supports any value from 1 to 24, 
                                     the default value is "12"    
                                   
     Enhancement 4: 
     [Hotfix N/A]     Attachment-Blocking - Files with .ODS extensions 
                      are treated as compressed files. This Patch 
                      enables users to configure the ScanMail (for 
                      Microsoft Exchange) 11.0 attachment blocking 
                      feature not to scan files inside open documents.
                    
     Procedure 4:     To configure this feature:

                      a. Install this Patch (see "Installation").

                      b. Open the Registry Editor. 

                      c. Locate the following key and set the 
                         appropriate value: 

                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for
                               Exchange\CurrentVersion
                         Key:  SkipBlockingFilesInsideOpenDoc
                         Type: REG_DWORD
                         Data value: "0" = Attachment blocking 
                                           scans files inside open 
                                           documents                      
                                     "1" = (default) Attachment blocking
                                           does not scan files inside 
                                           open documents

     Enhancement 5: 
     [Hotfix N/A]     Attachment- Blocking - This Patch enables users to 
                      configure the ScanMail (for Microsoft Exchange) 
                      11.0 attachment blocking feature not to block 
                      secured messages such as encrypted email messages 
                      and Opaque-signed email messages.
                    
     Procedure 5:     To configure this feature:
                    
                      a. Install this Patch (see "Installation").

                      b. Open the Registry Editor.

                      c. Locate the following key and set the 
                         appropriate value:
                       
                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for
                               Exchange\CurrentVersion
                         Key:  SkipActionForABSecuredMessage
                         Type: REG_DWORD
                         Data value: "0" = attachment blocking scans 
                                           secured messages
                                     "1" = (default) attachment blocking
                                            does not scan secured messages 
   
     Enhancement 6: 
     [Hotfix N/A]     Journal Reports - This Patch enables ScanMail (for 
                      Microsoft Exchange) 11.0 not to scan Journal 
                      reports by default to enhance performance.
                    
     Procedure 6:     To configure this feature:

                      a. Install this Patch (see "Installation").
                       
                      b. Open the Registry Editor.

                      c. Locate the following key and set the 
                         appropriate value:
 
                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for
                               Exchange\CurrentVersion
                         Key:  IsSkipJournalReportScanning
                         Type: REG_DWORD
                         Data value: "0" = Scan journal report
                                     "1" = (default)Skip to scan journal
                                           report

     Enhancement 7:   
     [Hotfix N/A]     Content Filter - This Patch provides an option to 
                      configure the content filter to extract plain text 
                      from email with HTML format and then scan the 
                      plain text instead. This option is disabled by 
                      default.
                       
     Procedure 7:     To configure this feature:
 
                      a. Install this Patch (see "Installation").
                    
                      b. Open the Registry Editor.
                    
                      c. Locate the following key and set the 
                         appropriate value:
                    
                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                               Exchange\CurrentVersion
                         Key:  CFTreatBodyAsPlainText
                         Type: REG_DWORD
                         Data value: "0" = (default) disables the option 
                                     "1" = enables the option
                    
                      d. Restart ScanMail (for Microsoft Exchange). 

     Enhancement 8:   
     [Hotfix N/A]     Internal Domains - This Patch enables the web
                      console to display the Internal Domain when 
                      a user does not have a Trend Micro Data Loss 
                      Prevention(TM) (DLP) license for ScanMail 
                      (for Microsoft Exchange) 11.0.           
                            
                     
     2.2 Resolved Known Issues
     ===================================================================
     This release resolves the following issues:

     Issue 1:     When the "Send messages to Deep Discovery Advisor for 
                  analysis" option is enabled in ScanMail (for Microsoft 
                  Exchange), the email messages may go into a loop and 
                  are not sent to the recipients.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 1:    
     [Hotfix 4259] This Patch helps ensure that email messages do not go 
                   through Deep Discovery Advisor repeatedly to prevent 
                   the looping issue. This feature is disabled in this 
                   Patch by default.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Procedure 1: To configure this feature:
 
                  a. Install this Patch (see "Installation").

                  b. Open the Registry Editor.

                  c. Locate the following key and set the appropriate 
                     value:
  
                     Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                           Exchange\CurrentVersion
                     Key:  DTASLoopCheck
                     Type: REG_DWORD
                     Data value: "0" = (default) disables the solution 
                                     
                                 "1" = enables the solution

                  d. Restart ScanMail (for Microsoft Exchange).
  
     Issue 2:     ScanMail (for Microsoft Exchange) 11.0 uses the 
                  envelope address of the sender to do a policy match. 
                  However, ScanMail always shows the letter address of 
                  the sender in log query results on the web console.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 2:   
     [Hotfix 4261] This Patch enables ScanMail (for Microsoft Exchange)
                   11.0 to show the envelope address of the sender in 
                   log query results on the web console.
  
     Issue 3:     An issue in lower versions of the OpenSSL module can 
                  prevent ScanMail (for Microsoft Exchange) 11.0 from
                  connecting to the Smart Protection Server (SPS) 
                  integrated with the Trend Micro OfficeScan(TM) server 
                  through SSL port 443.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 3:   
     [Hotfix 4266] This Patch resolves the issue to ensure that ScanMail 
                   (for Microsoft Exchange) 11.0 can connect to the SPS 
                   in the OfficeScan server through SSL port 443.
  
     Issue 4:     After upgrading to ScanMail 11 Service Pack 1 
                  Patch 1, ScanMail cannot update the scan engine and 
                  pattern files because the Active Update (AU) module 
                  does not start successfully.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 4:   
     [Hotfix 4267] Applying this Patch prevents the AU module from 
                   checking certificates by default to ensure that the 
                   module can start successfully. Users can enable the 
                   AU module to check certificates by following the 
                   procedure below.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Procedure 4: To enable the AU module to check certificates:

                  a. Install this Patch (see "Installation").

                  b. Open the "aucfg.ini" file in the "\SMEX\ folder 
                     of the ScanMail server.

                  c. Manually add the following key and set it to "1".

                     check_file_signature=1

                     Note: To disable the certificate checking feature
                           in the AU module, set 
                           "check_file_signature=0".

                  d. Save the changes and close the file.

     Issue 5:     After applying Hotfix 4261 for ScanMail (for 
                  Microsoft Exchange) 11.0, the "Sender" column in log 
                  queries becomes empty. Moreover, ScanMail does not 
                  send notifications to the sender for manual scan or 
                  real-time scan information on the store level.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 5:   
     [Hotfix 4268] This Patch resolves this issue to ensure that the
                   "Sender" column in log queries are not empty. This 
                   Patch also ensures that ScanMail sends out 
                   notifications to the sender for manual scan or 
                   real-time scan information on the store level in 
                   ScanMail (for Microsoft Exchange) 11.0.
                 
     Issue 6:     When a message body contains text/HTML, the DLP filter 
                  in ScanMail (for Microsoft Exchange) 11.0 treats the 
                  HTML tag as a social security number (SSN).
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 6:   
     [Hotfix 4269] This Patch provides an option to configure the DLP 
                   filter to extract plain text from email with HTML 
                   format and then scan the plain text instead. This 
                   option is disabled by default.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Procedure 6: To configure this feature:
 
                  a. Install this Patch (see "Installation").

                  b. Open the Registry Editor.

                  c. Locate the following key and set the appropriate 
                     value:
  
                     Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                            Exchange\CurrentVersion
                     Key:  DLPTreatBodyAsPlainText
                     Type: REG_DWORD
                     Data value: "0" = (default) disables the option 
                                 "1" = enables the option

                  d. Restart ScanMail (for Microsoft Exchange).                
                
     Issue 7:     When ScanMail (for Microsoft Exchange) 11.0 extracts a
                  "#" from the "href" HTML tag of an email message, it 
                  treats the "#" as a URL and sends it to the TMUFE 
                  engine for analysis. The engine may then tag the "#" 
                  as suspicious URL.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 7:   
     [Hotfix 4279] This Patch resolves this issue by allowing ScanMail 
                   (for Microsoft Exchange) 11.0 to skip "#" that is 
                   extracted from the "href" HTML tag.

     Issue 8:     The status of the ScanMail (for Microsoft Exchange) 
                  server may appear as "Active: Unknown service 
                  status" in the "Product Connection Status" page of
                  the Control Manager console even if the service is
                  active.                   
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 8:   
     [Hotfix N/A]  After applying this Patch, when the ScanMail (for 
                   Microsoft Exchange) Service is active, its status 
                   will appear as "Active: Service is working" on the
                   Control Manager console. 
                 
     Issue 9:     When the Email Reputation scan option under the Spam 
                  Prevention filter is enabled, the Microsoft Exchange 
                  Transport service may stop unexpectedly while ScanMail 
                  (for Microsoft Exchange) tries to retrieve some 
                  unavailable mail properties, such as mail sender and 
                  mail recipients.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 9:   
     [Hotfix N/A]  This Patch resolves this issue by enabling ScanMail 
                   (for Microsoft Exchange) to skip certain mail 
                   properties such as mail sender and mail recipients 
                   when the mail is scanned by Email Reputation filter. 

     Issue 10:    If users added attachment names in the blocking                  
                  targets list of the Attachment Blocking feature, the 
                  setting will not work on files inside folders that 
                  were extracted from a compressed attachment.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 10:   
     [Hotfix N/A]  This Patch ensures that the setting works on files 
                   inside folders that were extracted from a compressed
                   attachment.

     Issue 11:    ScanMail (for Microsoft Exchange) 11.0 may detect some
                  false positives when it scans Microsoft Excel(TM) 
                  files using a DLP policy with the default "All: 
                  Credit Card Number" expression.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 11:   
     [Hotfix N/A]  This Patch prevents the false positives by enabling 
                   ScanMail (for Microsoft Exchange) 11.0 to use the 
                   latest DLP compliance template.
                   
     Issue 12:    Reports appear unusually wide on the ScanMail (for 
                  Microsoft Exchange) 11.0 web console when the "Server 
                  name" is long.
                  ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     Solution 12:   
     [Hotfix N/A] This Patch enables the "Server name" field to word 
                  wrap its contents automatically to ensure that reports
                  are displayed normally. 

   
  3. Documentation Set
  ======================================================================
     To download or view electronic versions of the documentation set 
     for this product, go to http://docs.trendmicro.com

     In addition to this Readme file, the documentation set for this 
     product includes the following:

     - Online Help: The Online Help contains an overview of features
       and key concepts, and information on configuring and
       maintaining ScanMail (for Microsoft Exchange).
     
       To access the Online Help, go to http://docs.trendmicro.com

     - Installation Guide (IG): The Installation Guide contains
       information on requirements and procedures for installing and
       deploying ScanMail (for Microsoft Exchange). 
     
     - Administrator's Guide (AG): The Administrator's Guide contains
       an overview of features and key concepts, and information on
       configuring and maintaining ScanMail (for Microsoft Exchange).

     - Support Portal: The Support Portal contains information on
       troubleshooting and resolving known issues.

       To access the Support Portal, go to 
       http://esupport.trendmicro.com


  4. System Requirements
  ======================================================================
     There are no changes to the system requirements in the ScanMail 
     (for Microsoft Exchange) 11.0 Service Pack 1 readme file.


  5. Installation
  ======================================================================
     This section explains key steps for installing.
   
     - This Patch supports remote and multi-server deployment.
  
     - This Patch automatically restarts the following services
       on both Normal and Cluster Servers:

       - ScanMail (for Microsoft Exchange) Master Service
       - ScanMail (for Microsoft Exchange) Remote Configuration Server
       - ScanMail (for Microsoft Exchange) System Watcher
       - ScanMail EUQ Monitor
       - Microsoft Exchange Transport
       - MOM service
       - HealthService service

     - To install or uninstall this Patch, you must have at least 
       local administrator and domain user privileges.


     5.1 Installing
     ===================================================================
     To install:
 
     1. Log on using an account with local administrator and domain 
        privileges.

     2. Run "smex_110_win_en_sp1_patch2_b4283.exe" and select "Install". 
   
        The framework automatically installs the Patch to the 
        appropriate directory, replaces the outdated files, and updates 
        the database. 
   
        The "Successfully completed" count increases upon the completion 
        of the installation.

     3. Clear the browser cache and re-launch the browser.


     5.2 Uninstalling
     ===================================================================
     To roll back to the previous build: 
 
      - run "smex_110_win_en_sp1_patch2_b4283.exe" and select 
        "uninstall"; or
   
      - run "uninstall.bat" in the following patch folder:

        {SMEX_HOME}\Patch\Patch 2 for Service Pack 1\Uninstall

     The framework automatically rolls back to the previous build and
     a confirmation message indicating a successful uninstallation is 
     displayed on the setup screen.
 

  6. Post-Installation Configuration
  ======================================================================
     No post-installation steps are required.

     Note: Trend Micro recommends that you update your scan engine and  
           virus pattern files immediately after installing the 
           product.


  7. Known Issues
  ======================================================================
     There are no known issues in this release.


  8. Release History
  ======================================================================
     For more information about updates to this product, go to:
 
     http://www.trendmicro.com/download 

     - ScanMail (for Microsoft Exchange) 11.0 Patch 1 Service Pack 1, 
       February 9, 2015
     
     - ScanMail (for Microsoft Exchange) 11.0 Service Pack 1, 
       February 9, 2015
 
     - ScanMail (for Microsoft Exchange) 11.0 Patch 2, December 3, 2014
 
     - ScanMail (for Microsoft Exchange) 11.0 Patch 1, January 20, 2014
   
     - ScanMail (for Microsoft Exchange) 11.0, May 20, 2013

   
     8.1 Patch 1   
     ==================================================================


         8.1.1 Enhancements
         ==============================================================
         The following enhancements are included in this release:

         Enhancement 1:  
         [Hotfix 4180]   Session ID Generation - Patch 1 enables 
                         ScanMail (for Microsoft Exchange) 11.0 to 
                         generate longer session IDs using a 
                         combination of letters, numbers, and 
                         characters to help protect against brute force                             
                         attacks.

         Enhancement 2:  
         [Hotfix 4184]   Main Console - Patch 1 enables the "Server                     
                         Management" page of the ScanMail (for Microsoft 
                         Exchange) 11.0 console to display and respond 
                         faster.

         Enhancement 3: 
         [Hotfix 4186]   Quarantined Email Messages - In ScanMail (for 
                         Microsoft Exchange) 11.0, users can resend 
                         quarantined email messages only as attachments 
                         in new messages. Patch 1 allows users to resend        
                         the original versions of quarantined email                    
                         messages.

         Notes:          The Exchange Replay Directory must be enabled 
                         to resend the original messages of quarantined 
                         email messages.

                         To check if the Exchange Replay Directory is
                         enabled or not, run the following cmdlet 
                         command to display the current Replay Directory 
                         attributes. 

                         - For Exchange 2013
             
                     Get-TransportService <ServerIdentity> | Format-List 
                     Replay*

                         - For Exchange 2007 and Exchange 2010

                     Get-TransportServer <ServerIdentity> | Format-List 
                     Replay*
            
                         If the "ReplayDirectoryPath" attribute is 
                         "NULL", then the Exchange administrator has 
                         disabled the Replay Directory in which case the 
                         Exchange administrator must enable the Exchange 
                         Replay Directory again using the following 
                         cmdlet command.

                         - For Exchange 2013
              
                           Set-TransportService <ServerIdentity> 
                           -ReplayDirectoryPath <LocalFilePath>
   
                         - For Exchange 2007 and Exchange 2010
             
                           Set-TransportServer <ServerIdentity> 
                           -ReplayDirectoryPath <LocalFilePath>

                         Please refer to the applicable Microsoft 
                         Exchange documents for the cmdlet details.

                         - Email messages that trigger the "Quarantine 
                           entire message" action can be resent as 
                           original messages or in new messages while 
                           those that trigger the "Quarantine message 
                           part" action can only be resent in new 
                           messages.                                

         Enhancement 4: 
         [Critical Patch 1] VSAPI Engine- Patch 1 ensures that when 
                            the VSAPI engine detects a "HEUR_" or 
                            "EXPL_" virus file that does not trigger 
                            Advanced Threat Scan Engine (ATSE) rules, 
                            ScanMail (for Microsoft Exchange) 11.0 
                            sends the file to Deep Discovery Analyzer 
                            for further analysis. 

         Enhancement 5: 
         [Hotfix 4194]   Virus Scans - Patch 1 enables users to set 
                         whether ScanMail (for Microsoft Exchange) 11.0 
                         should back up infected encrypted and 
                         password-protected files during virus scans 
                         when the action for these types of files is set 
                         to "Pass" and the "backup infected file" option 
                         is enabled for virus scans.
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 5:    To configure this option:   

                         a. Open the Registry Editor.

                         b. Add or locate the following key and set the 
                            preferred value:
  
                            Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                                  Exchange\CurrentVersion
                            Key:  SkipBackupEncryptPwd
                            Type: REG_DWORD
                            Data value: "1" = ScanMail (for Microsoft 
                                              Exchange) does not back up
                                              infected encrypted and 
                                              password-protected files 
                                              when the action for these 
                                              types of files is set to 
                                              "Pass" and the "backup 
                                              infected file" option is 
                                              enabled for virus scans
                                        "0" = ScanMail (for Microsoft 
                                              Exchange) backs up 
                                              infected encrypted and 
                                              password-protected files 
                                              when the action for these 
                                              types of files is set to 
                                              "Pass" and the "backup 
                                              infected file" option is 
                                              enabled for virus scans

         Enhancement 6:  
         [Hotfix 4198]   Administrator Privileges - Patch 1 adds an 
                         option to prevent local and domain 
                         administrators from logging on to the ScanMail 
                         (for Microsoft Exchange) 11.0 web console.
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 6:    To configure this option: 

                         a. Specify users or groups that can be used to 
                            log on to and manage the ScanMail (for 
                            Microsoft Exchange) 11.0 web console into 
                            the "Access Control > Administrator" page. 

                         b. Install the Patch (see "Installation").
                     
                         c. Open the Registry Editor.

                         d. Add or locate the following key and set the 
                            preferred value:
  
                            Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                                  Exchange\CurrentVersion
                            Key:  DisableLocalAdminHasFullPermission
                            Type: REG_DWORD
                            Data value: "0" = ScanMail (for Microsoft 
                                              Exchange) allows local and 
                                              domain administrators to 
                                              log on to the web console
                                        "1" = ScanMail (for Microsoft 
                                              Exchange) does not allow 
                                              local and domain 
                                              administrators to log on 
                                              to the web console

                         e. Restart the ScanMail (for Microsoft
                            Exchange)  Master Service. 

         Enhancement 7:  
         [Hotfix 4221]  Pattern and Engine Updates - Patch 1 enables 
                        ScanMail (for Microsoft Exchange) 11.0 to update 
                        pattern and engine files through the HTTPS 
                        server when it is set to use "Trend Micro 
                        ActiveUpdate Server" as download source.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 7:   To configure this option:   

                        a. Open the Registry Editor.

                        b. Add or locate the following key and set the 
                           preferred value:
 
                           Path: HKLM\SOFTWARE\TrendMicro\
                                 ScanMail for Exchange\CurrentVersion
                           Key:  AUFromHTTPSServer
                           Type: REG_DWORD
                           Data value: "1" = ScanMail (for Microsoft 
                                             Exchange) uses the HTTPS 
                                             server when the download 
                                             source is set to "Trend 
                                             Micro ActiveUpdate Server". 
                                       "0" = ScanMail (for Microsoft 
                                             Exchange) uses the HTTP 
                                             server when the download 
                                             source is set to "Trend 
                                             Micro ActiveUpdate Server".

         Enhancement 8:
         [Hotfix 4227]   ATSE Rules - Patch 1 enables users to enable 
                         the "HEUR_HAS_MACRO" ATSE rule which is used to 
                         detect if an email file attachment contains 
                         macros. Users will also be able to set the 
                         "Pass" action for these email messages if these 
                         email messages are not analyzed or cannot be 
                         analyzed successfully by the Deep Discovery 
                         Advisor server. This helps reduce the number of 
                         false positive detections by the ATSE.
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 8:    To configure this option:   

                         a. Open the Registry Editor.

                         b. Locate or add the following keys and set the 
                            preferred value for each:
  
                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                               Exchange\CurrentVersion
                         Key:  EnableMacroRule
                         Type: REG_DWORD
                         Data value: "1" = enables the HEUR_HAS_MACRO
                                           ATSE rule
                                     "0" = disables the HEUR_HAS_MACRO
                                           ATSE rule

                         Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                               Exchange\CurrentVersion
                         Key:  PassMacroRule
                         Type: REG_DWORD
                         Data value: "1" = ScanMail (for Microsoft 
                                           Exchange) takes the "Pass"
                                           action on an email message 
                                           that triggers the 
                                           HEUR_HAS_MACRO rule that is
                                           not analyzed or cannot be 
                                           analyzed by the Deep 
                                           Discovery Advisor server
                                     "0" = ScanMail (for Microsoft 
                                           Exchange) takes the specified
                                           Advanced Threat action on an 
                                           email message that triggers 
                                           the HEUR_HAS_MACRO rule that 
                                           is not analyzed or cannot be 
                                           analyzed by the Deep
                                           Discovery Advisor server
     
         Enhancement 9: 
         [Hotfix 4229]   DLP Filter Templates - Patch 1 adds several new 
                         templates definitions for the DLP filter and 
                         allows users to configure the DLP filter in 
                         ScanMail (for Microsoft Exchange) 11.0 to merge
                         cells in Microsoft Excel(TM) spreadsheets 
                         during content-matching. 
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 9:    To enable the DLP filter in ScanMail (for 
                         Microsoft Exchange) 11.0 to merge cells in 
                         Excel spreadsheets during content-matching:

                         a. Open the Registry Editor.
                  
                         b. Add the following hidden key and set its 
                            value to "0".
 
                            Path: HKEY_LOCAL_MACHINE\SOFTWARE\
                                  TrendMicro\ScanMail for Exchange\
                                  CurrentVersion
                            Value Name: DLPDoNotMergeCells
                            Type: REG_DWORD
                            Value:0 

         Enhancement 10:
         [Hotfix 4230]   Deep Discovery Status Reports - Patch 1 enables  
                         ScanMail (for Microsoft Exchange) to time out 
                         immediately after it receives a "Not found" 
                         status report from the Deep Discovery Advisor 
                         server. 
       
         Enhancement 11:
         [Hotfix 4230]   Logs and Notifications - Patch 1 enables 
                         ScanMail (for Microsoft Exchange) to 
                         distinguish unsupported content and analysis 
                         timeout errors from other errors in the Log 
                         page and in notifications. These errors occur 
                         when ScanMail (for Microsoft Exchange) cannot 
                         upload samples to the Deep Discovery Advisor 
                         server or when the Deep Discovery Advisor  
                         server cannot analyze an uploaded sample.

         Note:           You need to clear the browser cache and 
                         re-launch the browser after installing Patch 1
                         to ensure that the changes appear on the 
                         Virtual Analyzer web console.
  
         Enhancement 12:
         [Hotfix 4231]   Web Reputation Filter - Patch 1 enables the 
                         ScanMail (for Microsoft Exchange) 11.0 Web 
                         Reputation filter to recognize URLs under the 
                         "Ransomware" URL category. 

         Enhancement 13:
         [Hotfix 4235]   Log Queries - Patch 1 enables ScanMail (for 
                         Microsoft Exchange) to query remote server logs 
                         or quarantined records using the Transport 
                         Layer Security (TLS) protocol.
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 13:   To enable TLS support:
 
                         a. Open the Registry Editor.

                         b. Add the following hidden key and set its 
                            value to "1".
  
                            Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                                  Exchange\CurrentVersion
                            Key:  EnableTLSQuery
                            Type: REG_DWORD
                            Value: 1

                         c. Restart the ScanMail (for Microsoft 
                            Exchange) service.

         Enhancement 14:
         [Hotfix 4238]   Quarantine and Log Queries - Patch 1 enables 
                         users to select the "Resend original message" 
                         and "Resend as new message" options in the 
                         "Quarantine&Log" query page.

         Note:           You need to clear the browser cache and 
                         re-launch the browser after installing Patch 1 
                         to ensure that the changes appear web console.

         Enhancement 15:
         [Hotfix 4238]   Manual and Scheduled Scans - Patch 1 enables 
                         users to specify folders for Manual Scan and 
                         Scheduled Scan.

         Note:           You need to clear the browser cache and 
                         re-launch the browser after installing Patch 1 
                         to ensure that the changes appear web console.

         Enhancement 16: 
         [Hotfix N/A]    Mail Headers - Patch 1 sets the default mail 
                         header size that ScanMail (for Microsoft 
                         Exchange) is allowed to generate to 
                         2 megabytes.

         Enhancement 17: 
         [Hotfix N/A]    Quarantine Malformed Messages Feature - Patch 1
                         enables users to disable the quarantine 
                         malformed messages feature.
                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 17:   To configure this option:
 
                         a. Open the Registry Editor.

                         b. Add the following hidden key and set the 
                            preferred value
  
                            Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                                  Exchange\CurrentVersion
                            Key:  PassMalformedMail
                            Type: REG_DWORD
                            Data value: "1" = ScanMail (for Microsoft 
                                              Exchange) does not scan 
                                              malformed email messages
                                        "0" = ScanMail (for Microsoft 
                                              Exchange) quarantines 
                                              malformed email messages

                         c. Restart the ScanMail (for Microsoft
                            Exchange) service.

         Enhancement 18: 
         [Hotfix N/A]    Analysis Timeout Value - Patch 1 allows users 
                         to set the analysis timeout value through the 
                         "Virtual Analyzer" page. 


         8.1.2 Resolved Known Issues
         ==============================================================
         The following known issues are resolved in this release:

         Issue 1:       If the Virus Pattern is updated while a manual 
                        or scheduled scan is running, ScanMail (for 
                        Microsoft Exchange) 11.0 restarts a new manual 
                        or scheduled scan to scan messages in selected 
                        mailboxes. When this happens, the manual or 
                        scheduled scan takes longer to complete or may 
                        not complete successfully.                       
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 1:
         [Hotfix 4181]  Patch 1 enables ScanMail (for Microsoft 
                        Exchange) 11.0 to continue manual and scheduled 
                        scans that were interrupted by a Virus Pattern 
                        update instead of starting new scan tasks.

         Issue 2:       EUQ Monitor Services stop unexpectedly when the 
                        name of the MAPI rules table is set to "NULL". 
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 2:  
         [Hotfix 4192]  Patch 1 enables EUQ Monitor Services to work 
                        normally under this scenario.

         Issue 3:       On the Control Manager console, the status of a 
                        registered ScanMail (for Microsoft Exchange) 
                        11.0 changes to "unregistered" instead of                      
                        "offline" when its service is down.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 3: 
         [Hotfix 4193]  Patch 1 ensures that the status of a registered
                        ScanMail (for Microsoft Exchange) 11.0 on the 
                        Control Manager console becomes "offline" when 
                        its service is down.

         Issue 4:       When the action for spam email messages is set 
                        to "Tag and Deliver" and the subject of a spam 
                        email message contains multi-byte characters, 
                        the email subject may become corrupted after 
                        ScanMail (for Microsoft Exchange) edits it 
                        because it uses the wrong character set to 
                        encode and decode the email subject.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 4:  
         [Hotfix 4195]  Patch 1 enables users to specify the character 
                        set for encoding and decoding the subject of 
                        spam email messages which can help ensure that 
                        the email subject does not get corrupted after 
                        editing.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Procedure 4:   To specify the character set for encoding and 
                        decoding the subject of spam email messages:   
 
                        a. Open the Registry Editor.

                        b. Add or locate the following key and set its
                           value to the correct character set:
  
                           Path: HKLM\SOFTWARE\TrendMicro\ScanMail for 
                                 Exchange\CurrentVersion
                           Key:  SubjectDefaultCharset
                           Type: REG_SZ
                           Data value: specific character set, for 
                                       example, "utf-8"

                        c. Restart ScanMail (for Microsoft Exchange).
                                                              
         Issue 5:       An issue between the iCRC common module and 
                        Control Manager 6.0 Service Pack 3 that is 
                        related to the current OpenSSL version in 
                        ScanMail (for Microsoft Exchange) 11.0 prevents 
                        ScanMail (for Microsoft Exchange) 11.0 from 
                        connecting to Control Manager through SSL.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 5:
         [Hotfix 4243]  Patch 1 resolves this issue by moving some 
                        OpenSSL library files to a sub folder.

         Issue 6:       ScanMail may automatically recreate the approved 
                        senders list after running spam maintenance on 
                        an Exchange Server 2010. 
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 6:
         [Hotfix 4244]  Patch 1 ensures that ScanMail recreates the 
                        approved senders list only when necessary.

         Issue 7:       ScanMail (for Microsoft Exchange) may stop 
                        unexpectedly while users attempt to access the 
                        "Server Groups" page under the "Administration" 
                        menu.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 7: 
         [Hotfix 4246]  Patch 1 ensures that users can access the 
                        "Server Groups" page normally.

         Issue 8:       Generated spam reports cannot display some 
                        information correctly.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 8:
         [Hotfix N/A]   Patch 1 ensures that spam reports display all 
                        required information correctly.

         Issue 9:       The ScanMail (for Microsoft Exchange) Master 
                        Service may stop unexpectedly when it receives 
                        a crafted web request. 
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 9:    
         [Hotfix N/A]   Patch 1 prevents the issue by ensuring that 
                        ScanMail (for Microsoft Exchange) processes 
                        supply parameters correctly.

         Issue 10:      ScanMail (for Microsoft Exchange) treats email 
                        messages that exceed 31 MB as unscannable and 
                        quarantines these messages as malformed email 
                        messages with 0 bytes during a Manual or 
                        Scheduled Scan on computers running on the 
                        Exchange 2013 platform.
                        ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         Solution 10:   
         [Hotfix N/A]   Patch 1 changes the default maximum size for 
                        unscannable email messages to 2001 MB and 
                        enables ScanMail to skip email messages that are 
                        larger than 2001 MB.


  9. Files Included in This Release  
  ======================================================================
     Filename                                        Build No.
     -------------------------------------------------------------------
     [SMEX_Root]\
        adapterSMTP.dll                              11.0.0.4283
        Build64.exe                                  2.85.0.1167
        cert5.db                                     N/A
        cfgSmexSettings.dll                          11.0.0.4283
        cgiCmdNotify.exe                             5.0.0.2166
        ciuas64.dll                                  1.0.0.2075
        ciussi64.dll                                 2.0.0.2074
        cmdHookVsapi.dll                             11.0.0.4283
        cmdQuarantineManager.dll                     11.0.0.4283
        cmdStorageMaintenance.dll                    11.0.0.4283
        cmdUpdate.dll                                11.0.0.4283
        cme_dll.dll                                  7.6.0.1109
        cme_vxe_dll.dll                              7.6.0.1109
        curl-ca-bundle.crt                           N/A
        DBScanner.exe                                11.0.0.4283
        DlpEngine.dll                                7.6.0.1109
        DTASAgent.dll                                11.0.0.4283
        DTASProtocalHandler.dll                      11.0.0.4283
        dtengine64.dll                               7.79.8235.1
        ecCMAgentProcessor.dll                       11.0.0.4283
        em_expression.dll                            7.6.0.1109
        em_synonym.dll                               7.6.0.1109
        En_I18N.dll                                  5.0.0.2166
        En_Utility.dll                               5.0.0.2166
        filterAntiSpam.dll                           11.0.0.4283
        filterAttachmentBlocking.dll                 11.0.0.4283
        filterContentFilter.dll                      11.0.0.4283
        filterDLP.dll                                11.0.0.4283
        filterWTP.dll                                11.0.0.4283
        filterVirusScanning.dll                      11.0.0.4283
        hookCommon.dll                               11.0.0.4283
        hookE12ComInterop.dll                        11.0.0.4283
        hookE15StoreCppProxy.dll                     11.0.0.4283
        hookVsapi.dll                                11.0.0.4283
        icrcauapi.dll                                2.5.0.1115
        ICRCHdler.dll                                1.5.0.1037
        libcurl.dll                                  7.46.0.0
        libeay32.dll                                 1.0.1.17
        liblwtpciu64.dll                             1.0.0.1005
        patch64.exe                                  2.85.0.1167
        patchw64.dll                                 12.20.0.0
        pbld64.dll                                   12.20.0.0
        resSystem.dll                                11.0.0.4283
        rnLogStorage.dll                             11.0.0.4283
        schtskStorageMaintenance.dll                 11.0.0.4283
        servCmAgentProductLibrary.dll                11.0.0.4283
        servDTAS.dll                                 11.0.0.4283
        servPolicyController.dll                     11.0.0.4283
        servReport.dll                               11.0.0.4283
        servRoleProcess.dll                          11.0.0.4283
        ssleay32                                     1.0.1.17
        SSO_PKIHelper.dll                            5.0.0.2166
        TmMsg.dll                                    2.0.1.1334
        tmpe.pol                                     N/A
        tmpeEnum.xml                                 N/A
        TmUpdate64.dll                               2.85.0.1167
        TrendAprWrapperDll.dll                       5.0.0.2166
        uiWebAdministration.dll                      11.0.0.4283
        uiWebDTASSetting.dll                         11.0.0.4283
        uiWebLog.dll                                 11.0.0.4283
        uiWebManualScan.dll                          11.0.0.4283
        uiWebRealtimeScan.dll                        11.0.0.4283
        uiWebScheduleScan.dll                        11.0.0.4283
        uiWebServerManagement.dll                    11.0.0.4283
        utilE12HookConfig.dll                        11.0.0.4283
        utilGenericMessage.dll                       11.0.0.4283
        utiliCRCHandler.dll                          11.0.0.4283
        utilNewSpamTask.dll                          11.0.0.4283
        utilRemoteTask.dll                           11.0.0.4283
        utilRPC.dll                                  11.0.0.4283
        utilSecurity.dll                             11.0.0.4283
        utilSystem.dll                               11.0.0.4283
        utilTMEMWrapper.dll                          11.0.0.4283
        utilTMSSWrapper.dll                          11.0.0.4283
        utilTMVSWrapper.dll                          11.0.0.4283
        utilUpdate.dll                               11.0.0.4283
        utilWebUI.dll                                11.0.0.4283
        x500.db                                      N/A

     [SMEX_Root]\config\
        Compliance_Template.xml                      N/A
        dbconf_Conf_4283.xml                         N/A
        dbconf_Log.xml                               N/A
        dbconf_Log_4283.xml                          N/A
        dbconf_Log_CCR.xml                           N/A
        dbDatabaseCreation_4283.js                   N/A
        dbSchema_Conf.xml                            N/A
        dbSchema_Log.xml                             N/A
        dbTableCreationSql_4283.xslt                 N/A
        
     [SMEX_Root]\engine\Emanager\
        em_helpr.dll                                 7.6.0.1109
        emDebug.dll                                  N/A
       
     [SMEX_Root]\EUQ\
        HouseKeepingTask.dll                         11.0.0.4283
        utilExchangeRule.dll                         11.0.0.4283
        utilMapi.dll                                 11.0.0.4283

     [SMEX_Root]\TMCM\
        En_I18N.dll                                  5.0.0.2166
        En_Utility.dll                               5.0.0.2166
        libapr-1.dll                                 1.1.1
        libcurl.dll                                  7.16.3
        libeay32.dll                                 N/A            
        SMEX_CmAgentHost.exe                         11.0.0.4283
        ssleay32.dll                                 N/A
        SSO_PKIHelper.dll                            5.0.0.2166
        TrendAprWrapperDll.dll                       5.0.0.2166
        utilCmConnectionTest.exe                     11.0.0.4283
        zlib.dll                                     1.2.2.0
        zlibwapi.dll                                 1.2.3.0

     [SMEX_Root]\web\
        cgiCmdNotify.exe                             5.0.0.2166
        En_BlobConvertUtility.dll                    5.0.0.2166
        En_I18N.dll                                  5.0.0.2166
        En_Utility.dll                               5.0.0.2166
        libapr-1.dll                                 1.1.1
        libcurl.dll                                  7.16.3
        libeay32.dll                                 N/A
        resSystem.dll                                11.0.0.4283
        ssleay32.dll                                 N/A
        SSO_PKIHelper.dll                            5.0.0.2166
        TrendAprWrapperDll.dll                       5.0.0.2166
        utilSystem.dll                               11.0.0.4283
        zlib.dll                                     1.2.2.0
        zlibwapi.dll                                 1.2.3.0
        
     [SMEX_Root]\web\html
        left.htm                                     N/A
        
     [SMEX_Root]\web\html\administration
        CM_Settings.htm                              N/A
        CM_Settings_Progress.htm                     N/A
      
     [SMEX_Root]\web\html\dtas\
        Virtual_Analyzer.htm                         N/A
       
     [SMEX_Root]\web\html\logs\
        Query.htm                                    N/A
       
     [SMEX_Root]\web\html\quarantine\
        Query.htm                                    N/A
        Resend_Info.htm                              N/A
       
     [SMEX_Root]\web\html\scan\
        Manualscan.htm                               N/A
        Scheduledscan.htm                            N/A

     [SMEX_Root]\web\javascripts\
        localization.js                              N/A

     [SMEX_Root]\web\javascripts\L10N\administration\
        CM_Settings.js                               N/A

     [SMEX_Root]\web\javascripts\L10N\dtas\
        Virtual_Analyzer.js                          N/A
      
     [SMEX_Root]\web\javascripts\L10N\logs\
        Query.js                                     N/A
       
     [SMEX_Root]\web\javascripts\L10N\quarantine\
        Query.js                                     N/A
        Resend_Info.js                               N/A

     [SMEX_Root]\web\javascripts\L10N\scan\
        Manualscan.js                                N/A
        Scheduledscan.js                             N/A

     [SMEX_Root]\web\javascripts\L10N\searchdestroy\
        EditTask.js                                  N/A
        NewTask.js                                   N/A

     [SMEX_Root]\web\xml\
        localization.xml                             N/A
        log_presentation.xslt                        N/A
        quarantine_presentation.xslt                 N/A
        virus_risk_level_table.xml                   N/A
        report_presentation.xslt                     N/A


  10. Contact Information  
  ======================================================================
     A license to Trend Micro software usually includes the right to
     product updates, pattern file updates, and basic technical support
     for one (1) year from the date of purchase only. After the first
     year, you must renew Maintenance on an annual basis at 
     Trend Micro's then-current Maintenance fees.

     Contact Trend Micro via fax, phone, and email, or visit our website
     to download evaluation copies of Trend Micro products.

     http://www.trendmicro.com/us/about-us/contact/index.html

     NOTE: This information is subject to change without notice.


  11. About Trend Micro  
  ======================================================================
     Smart, simple, security that fits

     As a global leader in IT security, Trend Micro develops innovative
     security solutions that make the world safe for businesses and
     consumers to exchange digital information.

     Copyright 2016, Trend Micro Incorporated. All rights reserved.

     Trend Micro, ScanMail, Control Manager, Data Loss Prevention, 
     OfficeScan, and the t-ball logo are trademarks of Trend Micro 
     Incorporated and are registered in some jurisdictions. All other 
     marks are the trademarks or registered trademarks of their 
     respective companies.


  12. License Agreement  
  ======================================================================
     View information about your license agreement with Trend Micro at: 
     
     http://www.trendmicro.com/us/about-us/legal-policies/
          license-agreements

     Third-party licensing agreements can be viewed:
    
     - By selecting the "About" option in the application user interface
   
     - By referring to the "Legal" page of the Administrator's Guide 


