<> Trend Micro, Inc. December 23, 2014 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) InterScan(TM) Messaging Security Virtual Appliance 9.0 Critical Patch - Build 1503 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents =================================================================== 1. Overview of this Critical Patch Release 1.1 Files Included in this Release 2. Documentation Set 3. System Requirements 4. Installation/Uninstallation 4.1 Installation 4.2 Uninstallation 5. Post-installation Configuration 6. Known Issues 7. Release History 8. Contact Information 9. About Trend Micro 10. License Agreement =================================================================== 1. Overview of this Critical Patch Release ====================================================================== This critical patch resolves the following issue: Issue: In InterScan Messaging Virtual Appliance (IMSVA) versions released before version 9.0, when an administrator configures the "Administration > SMTP Routing > Message Delivery" settings and input a fully-qualified domain name (FQDN) for the target "Server address", Postfix will try to query the MX record of the FQDN so that: - if the MX record exists, IMSVA will deliver the mail to the MX record. - if the MX record does not exist, IMSVA will try to query the corresponding A record and deliver the mail to the A record. The IMSVA 9.0 GM build queries only the A record of the FQDN. This may cause email delivery issues when delivering messages between different IMSVA versions. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution: This critical patch prevents delivery issues by making the following changes: - If a user imports configuration files from versions older than version 9.0 GM build, it will keep the same behavior as the previous version. - If a user adds a new delivery setting in IMSVA 9.0, the user has the option to configure IMSVA to query the MX record or A record. Note: This solution will be added to the repacked version of IMSVA 9.0 GM build and in Hot Fix 1504 so that upgrading to any of these versions also resolves the issue. Refer to "Known Issues" for more information on a known Issue related to this solution. 1.1 Files Included in this Release =================================================================== A. Files for Current Issue ------------------------------------------------------------------- Filename Build No. ------------------------------------------------------------------- Files for Issue -------------------------------------------------------------------- libPolicyCaller.so 9.0.0.1503 libFilterEmgrPlugin.so 9.0.0.1503 libImssEncrypt.so 9.0.0.1503 libImssCommon.so 9.0.0.1503 libPolicyUtility.so 9.0.0.1503 libTMNotify.so 9.0.0.1503 libImssDAO.so 9.0.0.1503 libFilterGraymail.so 9.0.0.1503 libFilterWrs.so 9.0.0.1503 libImssCrypto.so 9.0.0.1503 libFilterVirus.so 9.0.0.1503 libFilterSpsTmase.so 9.0.0.1503 libImssPolicy.so 9.0.0.1503 libIMSSjni.so 9.0.0.1503 libImssRule.so 9.0.0.1503 libTMNotifymt.so 9.0.0.1503 libFilterAntiSpoof.so 9.0.0.1503 libFilterAction.so 9.0.0.1503 libFilterDkimEF.so 9.0.0.1503 imp_exp 9.0.0.1503 imssps 9.0.0.1503 ibe_reg 9.0.0.1503 imssmgr 9.0.0.1503 imssd 9.0.0.1503 forceUpdate 9.0.0.1503 pack_tool 9.0.0.1503 ibe_job_doer 9.0.0.1503 ibe_job_getter 9.0.0.1503 imssdps 9.0.0.1503 dtasagent 9.0.0.1503 wrsagent 9.0.0.1503 imssausched 9.0.0.1503 ibes 9.0.0.1503 sys_noti_settings.jsp 9.0.0.1503 c1_notification.jsp 9.0.0.1503 smtp_delivery_detail.jsp 9.0.0.1503 imss6System.properties 9.0.0.1503 imss6System_en.properties 9.0.0.1503 MTASettingAction$18.class 9.0.0.1503 WizardAction.class 9.0.0.1503 MTASettingAction$13.class 9.0.0.1503 MTASettingAction$6.class 9.0.0.1503 MTASettingAction$19.class 9.0.0.1503 MTASettingAction$20.class 9.0.0.1503 MTASettingAction.class 9.0.0.1503 MTASettingAction$12.class 9.0.0.1503 MTASettingAction$10.class 9.0.0.1503 MTASettingAction$1.class 9.0.0.1503 MTASettingAction$4.class 9.0.0.1503 MTASettingAction$22.class 9.0.0.1503 MTASettingAction$17.class 9.0.0.1503 MTASettingAction$8.class 9.0.0.1503 MTASettingAction$9.class 9.0.0.1503 NotiSettingsAction.class 9.0.0.1503 MTASettingAction$14.class 9.0.0.1503 MTASettingAction$11.class 9.0.0.1503 MTASettingAction$23.class 9.0.0.1503 MTASettingAction$25.class 9.0.0.1503 MTASettingAction$5.class 9.0.0.1503 WizardActionAppliance.class 9.0.0.1503 MTASettingAction$3.class 9.0.0.1503 MTASettingAction$26.class 9.0.0.1503 MTASettingAction$16.class 9.0.0.1503 MTASettingAction$7.class 9.0.0.1503 MTASettingAction$15.class 9.0.0.1503 MTASettingAction$21.class 9.0.0.1503 MTASettingAction$24.class 9.0.0.1503 MTASettingAction$2.class 9.0.0.1503 NotiSetting.class 9.0.0.1503 DeliveryPolicyDAO.class 9.0.0.1503 DeliveryPolicy.class 9.0.0.1503 struts-config-system.xml 9.0.0.1503 Online help 9.0.0.1503 B. Files for Previous Issues ------------------------------------------------------------------- Not applicable. 2. Documentation Set ====================================================================== In addition to this readme.txt, the documentation set for this product includes the following: o Readme.txt-basic installation, known issues, release history, and contact information o Installation Guide (IG): Provides product overview, deployment plan, installation steps and basic information intended to help you deploy IMSVA. o Administrator's Guide (AG): Provides post-installation instructions on how to configure the settings to help you get IMSVA "up and running". Also includes instructions on performing other administrative tasks for the day-to-day maintenance of IMSVA. o Electronic versions of the printed manuals are available at: http://docs.trendmicro.com o Online help: Help screens that provide instructions on performing administrative tasks for the day-to-day use of IMSVA. 3. System Requirements ====================================================================== Not applicable. 4. Installation/Uninstallation ====================================================================== Note: You must install this critical patch on all computers running IMSVA 9.0 except if you have applied the repacked GM build, Hot Fix 1504, or any later hot fix. 4.1 Installation =================================================================== To install this critical patch: 1. Extract the files for this critical patch to a local folder. 2. Run the "cd ./imsva_90_criticalpatch1503" command. 3. Run the "./imssinst" command and follow the screen prompts to complete the installation. The following message appears after the system completes the installation: "Installation is complete and related services are started." Note: For rollback purposes, the installation program moves the original IMSVA files to "/opt/trend/imss/patch/CP_B1503". 4.2 Uninstallation =================================================================== To roll back to the previous build: 1. Go to the folder where you extracted the critical patch files. 2. Run the "./imssinst" command and follow the screen prompts to complete the rollback. The following message appears after the system completes the rollback process: "Rollback is complete and related services are started." 5. Post-installation Configuration ====================================================================== No post-installation steps are required. Note: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing this critical patch. 6. Known Issues ====================================================================== The following is a known issue for this release: 6.1 New delivery settings do not work after users roll back this critical patch. ------------------------------------------------------------------- After installing this critical patch, if a user adds a new delivery setting in IMSVA 9.0, configure IMSVA to query the MX record, and then roll back this critical patch, the new delivery setting will not work and will no longer appear in the IMSVA console. 7. Release History ====================================================================== See the following web site for more information about updates to this product: http://downloadcenter.trendmicro.com 8. Contact Information ====================================================================== A license to the Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, Maintenance must be renewed on an annual basis at Trend Micro's then-current Maintenance fees. You can contact Trend Micro via fax, phone, and email, or visit us at: http://www.trendmicro.com Evaluation copies of Trend Micro products can be downloaded from our web site. Global Mailing Address/Telephone numbers ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ For global contact information in the Asia/Pacific region, Australia and New Zealand, Europe, Latin America, and Canada, refer to: http://www.trendmicro.com/en/about/overview.htm The Trend Micro "About Us" screen displays. Click the appropriate link in the "Contact Us" section of the screen. Note: This information is subject to change without notice. 9. About Trend Micro ====================================================================== Trend Micro Incorporated, a global leader in Internet content security and threat management, aims to create a world safe for the exchange of digital information for businesses and consumers. A pioneer in server-based antivirus with over 20 years experience, we deliver top-ranked security that fits our customers' needs, stops new threats faster, and protects data in physical, virtualized and cloud environments. Powered by the Trend Micro Smart Protection Network(TM) infrastructure, our industry-leading cloud-computing security technology and products stop threats where they emerge, on the Internet, and are supported by 1,000+ threat intelligence experts around the globe. For additional information, visit www.trendmicro.com. Copyright 2014, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, Smart Protection Network, and InterScan are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other marks are the trademarks or registered trademarks of their respective companies. 10. License Agreement ====================================================================== Information about your license agreement with Trend Micro can be viewed at: http://us.trendmicro.com/us/about/company/user_license_agreements/ Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Getting Started Guide or Administrator's Guide