<> Trend Micro Incorporated February 16th, 2022 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Deep Discovery Inspector 5.6 - Service Pack 1 English - Linux - 64 Bits Critical Patch - Build 1059 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ================================================================ 1. Critical Patch Release Information 1.1 Resolved Known Issues 1.2 Enhancements 1.3 Files Included in This Release 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement ================================================================ 1. Critical Patch Release Information ======================================================================== 1.1 Resolved Known Issues ==================================================================== There are no issues for this Critical Patch release. 1.2 Enhancements ==================================================================== The following enhancements are included in this Critical Patch: Enhancement 1: This Hotfix enables Deep Discovery Inspector to support the Entrust certificate for the Active Update module to ensure that it can perform component updates after May 9, 2022. 1.3 Files Included in This Release ==================================================================== There are no files included in this Critical Patch release. 2. Documentation Set ======================================================================== To download or view electronic versions of the documentation set for this product, go to http://docs.trendmicro.com - Online Help: The Online Help contains an overview of features and key concepts, and information on configuring and maintaining the product. To access the Online Help, go to http://docs.trendmicro.com - Installation Guide (IG): The Installation Guide contains information on requirements and procedures for installing and deploying the product. - Administrator's Guide (AG): The Administrator's Guide contains an overview of features and key concepts, and information on configuring and maintaining the product. - Getting Started Guide (GSG): The Getting Started Guide contains product overview, installation planning, installation and configuration instructions, and basic information intended to get the product 'up and running'. - Support Portal: The Support Portal contains information on troubleshooting and resolving known issues. - To access the Support Portal, go to http://success.trendmicro.com 3. System Requirements ======================================================================== 1. Deep Discovery Inspector 5.6 Service Pack 1 Build 1050 - English - Linux - x64 4. Installation ======================================================================== This section explains key steps for installing the Critical Patch. 4.1 Installing ==================================================================== To install: 1. Open the Deep Discovery Inspector web console. 2. Go to the "Administration > Updates > Product Updates > Hot Fixes / Patches" page. 3. Click "Browse" and select the "ddi_5.61_lx_en_criticalpatch1059_b1059.tar.gz.tar" file from the folder where you extracted the Critical Patch files. 4. Click the "Upload" link. 5. Click "Continue" after the upload process has finished. 6. Clear the browser cache. 4.2 Uninstalling ==================================================================== To roll back to the previous build: 1. Open the Deep Discovery Inspector web console. 2. Go to the "Administration > Updates > Product Updates > Hot Fixes / Patches" page. 3. Click the "Roll Back" link. 4. Click "OK" when a confirmation message appears. 5. Post-installation Configuration ======================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the product. 6. Known Issues ======================================================================== There are no known issues for this Critical Patch release. 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download Prior Hotfixes ==================================================================== Only this Critical Patch was tested for this release. Prior hotfixes were tested at the time of their release. [Hotfix 1057] Issue 1: When Deep Discovery Inspector 5.0, 5.1, or 5.5 registers to Apex Central and then upgrades to version 5.6 Service Pack 1, the Network Content Inspection Engine used by the older version still appears on the Apex Central "Scan Engine Summary for Services/Appliances" page and are counted as an out-dated component. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This Hotfix resolves this issue by ensuring that the older engine versions that are no longer used in the current version are properly tagged. [Hotfix 1056] Enhancement 1: This Hotfix enables the Network Content Inspection Engine to enable it to support VN-Tag/802.1Qbh. [Hotfix 1054] Issue 1: The Component Update module is affected by an Arbitrary File Upload and Remote Code Execution vulnerabilities. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This hotfix updates the Component Update module to resolve these vulnerabilities. [Hotfix 1053] Issue 1: An issue prevents Deep Discovery Director from deploying hotfixes to Deep Discovery Inspector. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This hotfix resolves this issue. [Hotfix 1051] Issue 1: An issue prevents the Web Reputation Services (WRS) module from rating URLs that end with an equal sign "=". ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This hotfix resolves the issue so the WRS module can detect and rate these URLs correctly. Issue 2: Users cannot add an Active Directory (AD) group if the group name contains any of the following special characters. * asterisk "*" * open parenthesis "(" * close parenthesis ")" * forward slash "\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 2: This hotfix enables users to add AD group names that contain special characters. Issue 3: The "ASR0001 The Watchdog timer reset the system." message appears on the appliance LCD Panel after Deep Discovery Inspector restarts. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 3: This hotfix resolves this issue. Issue 4: Sometimes, Deep Discovery Inspector stops scanning network traffic because the Network Content Inspection Engine (NCIE) attempts to access an invalid memory address. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 4: This hotfix updates NCIE to prevent this issue. Issue 5: In the "Administration > Virtual Analyzer > File Submissions" page, when users click "Add" or "Edit", select the "Advanced" option under the "Criteria" section, then click the "Select" button to display the "Detection Rules List", Detection Rule IDs greater than or equal to 4000 do not appear on the list. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 5: This hotfix resolves this issue. Issue 6: It takes longer to export CSV files form the "Detections > All Detections > Export" page on the Deep Discovery Inspector 5.6 web console that in previous versions. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 6: This hotfix resolves this issue to ensure that users can export CSV files faster from the Deep Discovery Inspector 5.6 web console. 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. https://www.trendmicro.com/en_us/contact.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits. As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2022, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, OfficeScan, Trend Micro Security (for Mac), Control Manager, Trend Micro Apex One, and Trend Micro Apex Central are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other product or company names may be trademarks or registered trademarks of their owners. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: https://www.trendmicro.com/en_us/about/legal.html Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide