<> Trend Micro, Inc. July 25, 2018 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) ScanMail(TM) (for Microsoft(TM) Exchange) Version 12.5 Service Pack 1 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Note: This readme file was current as of the date above. However, all customers are advised to check the Trend Micro website for documentation updates at: http://docs.TrendMicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx Register online with Trend Micro within 30 days of installation to continue downloading new pattern files and product updates from the Trend Micro website. Register during installation or online at: http://olr.TrendMicro.com/ Contents =================================================================== 1. About ScanMail for Microsoft Exchange 1.1 Overview of this Release 1.2 Who Should Install this Release 2. What's New 2.1 New Features and Enhancements in 12.5 Service Pack 1 2.2 Resolved Issues 3. Documentation Set 4. System Requirements 5. Installation/Uninstallation 5.1 Installation Notes 6. Post-installation Configuration 7. Known Issues 8. Release History 9. Contact Information 10. About Trend Micro 11. License Agreement =================================================================== 1. About ScanMail for Microsoft Exchange ======================================================================== ScanMail protects Exchange Server 2016, Exchange Server 2013, and Exchange Server 2010. Use the ScanMail installation program to quickly install ScanMail to one or more, local or remote, Exchange servers. Once installed, ScanMail can protect your servers in real time against viruses/malware, Trojans, worms, and spyware/grayware. ScanMail sustains business and network integrity by screening out spam messages and messages containing undesirable or unwanted content. ScanMail monitors and protects sensitive information that is traveling across your network. 1.1 Overview of this Release ===================================================================== Service Pack 1 introduces new features that support predicting business email compromise by learning high profile users' email writing style. 1.2 Who Should Install this service pack ===================================================================== Administrators currently running ScanMail (for Microsoft Exchange) 12.5 should install this service pack. 2. What's New ======================================================================== 2.1 New Features and Enhancements in 12.5 Service Pack 1 ===================================================================== This service pack includes the following new features and enhancements: 2.1.1 Writing Style Training ===================================================================== This version integrates with Trend Micro's Writing Style DNA technology as an additional layer of protection for your organization's users against Business Email Compromise (BEC) threats. It scans the written English email messages of a desired individual to learn their particular writing style, and then generates a writing style model on the email system. 2.1.2 Writing Style Verification ===================================================================== This version allows administrators to enable writing style verification to use the model to compare with the user's subsequent English email messages to detect probable BEC attacks. 2.1.3 Connected Threat Defense ===================================================================== This version enables administrators to configure ScanMail to synchronize suspicious object list for file objects from the Trend Micro Control Manager server. Control Manager brings together Trend Micro products and solutions to help you detect, analyze, and respond to targeted attacks and advanced threats, before they unleash lasting damage. ScanMail leverages the Smart Protection Network to detect suspicious objects in URLs. 2.1.4 Product Enhancements ===================================================================== This version enables administrators to configure scheduled scan to pause after a certain number of hours. If the scan pauses before it completes, it resumes at the next scheduled date and time. 2.2 Resolved Issues ===================================================================== - This version of ScanMail fixed the "HTTP 500 Internal Server Error" problem that users encounter after clicking on the "Logon With Credentials Domain" option on the logon screen of the ScanMail for Microsoft Exchange 12.5 web console. [Hotfix: hfb1307-12.5 EN] - This version of ScanMail updates the error handling mechanism to enable ScanMail for Exchange 12.5 to handle "NO_SUPP_ERROR" and "BAD_ZIP_ERR" errors from the VSAPI. [Hotfix: hfb2020-12.5 JP] - This version of ScanMail resolves the resend failure issue that occurs when users attempt to resend the original message of a quarantined email message if the total length of all recipient addresses in the "TO", "CC", and "BCC" fields exceeds 8192 bytes. [Hotfix: hfb1801-12.0 SP1 Patch2 EN] - This version of ScanMail enables the high profile users list to use "\t" to separate user information fields on the list. This change resolves the issue that a user cannot be saved in the high profile users list if the user's first name, last name, or domain name contains a comma. [Hotfix: hfb1312-12.5 EN] - This version of ScanMail upgrades the iCRC common module to 2.82.0.1058, which corrects the format (of the information) that the iCRC common module appends to the "User Agent" header. [Hotfix: hfb1810-12.0 SP1 Patch2 EN] - This version of ScanMail ensures that when Attachment Blocking is enabled, its tracing logs record all attachments that pass through ScanMail for Exchange. [Hotfix: hfb1316-12.5 EN] - This version of ScanMail provides an option to configure ScanMail to skip the extracting and scanning of URLs in digitally signed email messages. [Hotfix: hfb1318-12.5 EN] - This version of ScanMail enables the eManager(TM) module to support hyperlink extraction from email file attachments. [Hotfix: hfb1310-12.5 EN] - This version of ScanMail ensures that scheduled updates run on the schedule without delays. This change can resolve the issue that successive scheduled updates are delayed by one to two seconds. [Hotfix: hfb2021-12.5 JP] - This version of ScanMail increases the DNS query timeout value for the Predictive Machine Learning service to resolve the issue, that is, Predictive Machine Learning cannot be enabled because of a timeout. [Hotfix: hfb1320-12.5 EN] - This version of ScanMail provides an option for users to enable ScanMail to move an internal email message (considered as a spam or containing suspicious URLs) to the junk email folder if users selected the "Quarantine message to user's spam folder" action. [Hotfix: hfb1321-12.5 EN] - This version of ScanMail ensures that ScanMail can send notification email messages to senders for Web Reputation violations if users selected the "Notify sender" option. [Hotfix: hfb1322-12.5 EN] - This version of ScanMail fixes the issue, that is, the Attachment Blocking OLE Scan feature doesn't work. [Hotfix: hfb1323-12.5 EN] - This version of ScanMail ensures that users can query Virtual Analyzer Submission logs with no system errors after querying other logs by attachment name. [Hotfix: hfb1324-12.5 EN] 3. Documentation Set ======================================================================== o Readme.txt -- basic installation, known issues, release history and contact information o Administrator's Guide -- product overview, configuration instructions, and detailed information for managing the product environment. Electronic versions of the printed manuals are available at: http://docs.trendmicro.com/en-us/enterprise/ scanmail-for-microsoft-exchange.aspx o Installation Guide -- A PDF document containing product requirements, deployment planning, installation instructions and other information intended to get you "up and running." o Online help -- Context-sensitive help screens that provide guidance for performing a task. 4. System Requirements ======================================================================== There are no changes to the system requirements in the ScanMail (for Microsoft Exchange) 12.5 readme file. Additionally, this service pack fully supports: - Windows Server 2016 - .Net Framework 4.7.1 - Cumulative Update 10 for Exchange Server 2016 - SQL server 2016 service pack 2 - Microsoft Resilient File System (ReFS) 5. Installation/Uninstallation ======================================================================== This section explains key steps for installing. - This Service Pack supports remote and multi-server deployment. - This version of ScanMail automatically restarts the following services on Exchange Servers: - ScanMail (for Microsoft Exchange) Master Service - ScanMail (for Microsoft Exchange) Remote Configuration Server - ScanMail (for Microsoft Exchange) System Watcher - ScanMail EUQ Monitor - Microsoft Exchange Transport - HealthService service - To install or uninstall this service pack, you must have at least local administrator and domain user privileges. Note: The installing account requires "log on as batch" or "log on as service" rights after turning on User Account Control (UAC). 5.1 Installing =================================================================== To install: 1. Log on using an account with local administrator and domain user privileges. 2. Run "Setup.exe" and select "Install". The framework automatically installs the Service Pack to the appropriate directory, replaces the outdated files, and updates the database. The "Successfully completed" count increases upon the completion of the installation. 3. Clear the browser cache and re-launch the browser. 5.2 Uninstalling =================================================================== To roll back to the previous build: - run "setup.exe" and select "uninstall". The framework automatically rolls back to the previous build and a confirmation message indicating a successful uninstallation is displayed on the setup screen. 6. Post-installation Configuration ======================================================================== No special post-installation steps are required. Refer to the Trend Micro ScanMail (for Microsoft Exchange) 12.5 Service Pack 1 Installation Guide for more information. Note: Trend Micro recommends that updating all components immediately after installing the product. 7. Known Issues ======================================================================== N/A 8. Release History ======================================================================== ScanMail 12.0 for Microsoft Exchange March 2016 ScanMail 12.0 for Microsoft Exchange Service Pack 1 November 2016 ScanMail 12.5 for Microsoft Exchange November 2017 9. Contact Information ======================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.TrendMicro.com Evaluation copies of Trend Micro products can be downloaded from our website. Global Mailing Address/Telephone Numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, United States, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 10. About Trend Micro ======================================================================== Trend Micro, Inc. provides centrally controlled server-based virus protection and content-filtering products and services. By protecting information that flows through Internet gateways, email servers, and file servers, Trend Micro allows companies worldwide to stop viruses and other malicious code from a central point before they can reach the desktop. Copyright 2018, Trend Micro, the Trend Micro t-ball logo, and ScanMail are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 11. License Agreement ======================================================================== Information about your license agreement with Trend Micro can be viewed at: http://www.trendmicro.com/en/purchase/license Third-party licensing agreements can be viewed: - By referring to the file "Third-party_licensing_agreements.doc"