<> Trend Micro Incorporated September 3rd, 2020 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Trend Micro(TM) Deep Discovery Web Inspector 2.5 - GM English - Linux - 64 Bits Patch 1 - Build 1556 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Contents ================================================================ 1. Patch Release Information 1.1 Resolved Known Issues 1.2 Enhancements 2. Documentation Set 3. System Requirements 4. Installation 4.1 Installing 4.2 Uninstalling 5. Post-installation Configuration 6. Known Issues 7. Release History 7.1 Prior Hotfixes 8. Contact Information 9. About Trend Micro 10. License Agreement ================================================================ 1. Patch Release Information ======================================================================== 1.1 Resolved Known Issues ==================================================================== This Hotfix resolves the following issue(s): Issue 1: There is a buffer overflow issue when Deep Discovery Web Inspector handles a URL which has a length longer than 16K. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This hotfix enables Deep Discovery Web Inspector to handle a very long URL properly. 1.2 Enhancements ==================================================================== The following enhancements are included in this Hotfix: Enhancement 1: This patch enables Deep Discovery Web Inspector to support 5G inline HTTP(s) Web Traffic. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Enhancement 1.1: Deep Discovery Web Inspector provides a new high-end hardware Deep Discovery Web Inspector 4200 to support 5Gbps inline HTTP(s) Web Traffic. Enhancement 1.2: Deep Discovery Web Inspector 4200 adds a 10Gbps Fiber Networking Bypass Card by default. Enhancement 1.3: A new license is available to enable the 5Gbps HTTP(s) traffic scan. Enhancement 1.4: Deep Discovery Web Inspector 4200 supports 5Gbps Web traffic for bridge mode and proxy mode. Bridge mode can be deployed from the admin console. But for 5Gbps proxy mode, after running the deployment wizard from admin console, you need to do configuration using CLI (Command Line Interface). A new CLI(Command Line Interface) is provided to enable the 5Gbps HTTP(s) proxy mode: # configure proxy I A new CLI(Command Line Interface) is provided to restore 5Gbps proxy mode to 1Gbps: # configure proxy M Refer to Deep Discovery Web Inspector 4200 Quick Start Card and Deep Discovery Installation and Deployment Guide for the DDWI 4200 hardware details. Enhancement 2: Deep Discovery Web Inspector adds a new CLI (Command Line Interface) to support restarting all web console related services separately. # restart service ConsoleUI 2. Documentation Set ======================================================================== Electronic versions of the printed manuals are available at: http://www.docs.trendmicro.com In addition to this Readme, the documentation set for this product includes the following: * Quick Start Card -- The Quick Start Card provides user-friendly instructions on connecting Deep Discovery Web Inspector to your network and on performing the initial configuration. * Installation and Deployment Guide -- The Installation and Deployment Guide discusses requirements and procedures for installing and deploying Deep Discovery Web Inspector. * Administrator's Guide -- The Administrator's Guide contains detailed instructions on how to deploy, configure, and manage Deep Discovery Web Inspector, and provides explanations on Deep Discovery Web Inspector concepts and features. * Online Help -- The Online Help contains explanations of Deep Discovery Web Inspector components and features, as well as procedures needed to configure Deep Discovery Web Inspector. To access Help, open the product console and click the Help icon. * Syslog and Content Mapping Guide -- The Syslog Content Mapping Guide contains information on event logging formats supported by Deep Discovery Web Inspector. * Support Portal -- The Support Portal contains information on troubleshooting and resolving known issues. It provides the latest information about known product issues. To access the Support Portal, go to the following website: http://esupport.trendmicro.com 3. System Requirements ======================================================================== 1. Trend Micro Deep Discovery Web Inspector 2.5 GM Build 1369 - English - Linux - x64 4. Installation ======================================================================== This section explains the key steps for installing the Patch. 4.1 Installing ==================================================================== To install: 1. Click Administration > Product Updates > Hotfixes / Patches. The Install Hotfix/Patch screen appears. 2. Click Browse and select the patch file: ddwi_25_lx_en_hfb1556.7z.tar. 3. Click Install. 4. Verify that the hotfix has been installed successfully. a. Click Administration > Product Updates > Hotfixes/Patches. In the History table, check if the Build is 1556 and Description is DDWI 2.5 Patch1 Build 1556. b. Choose the About option under Help. c. Verify the hot fix number on the About page is 1556. 5. Clear the web browser cache. NOTES: - The firmware version for the device will NOT change after applying this patch. - Deep Discovery Web Inspector 2.5 restarts automatically after installing this patch. 4.2 Uninstalling ==================================================================== This patch cannot be uninstalled. 5. Post-Installation Configuration ======================================================================== No post-installation steps are required. NOTE: Trend Micro recommends that you update your scan engine and virus pattern files immediately after installing the patch. 6. Known Issues ======================================================================== 6.1 This patch install requires restarting the DDWI appliance. If you see a "60000ms timeout" message when applying the patch, you can ignore this message. 6.2 As this patch cannot be uninstalled, when you click the Roll back button, you will see an "unexpected error" message. You can ignore this message. 7. Release History ======================================================================== For more information about updates to this product, go to: http://www.trendmicro.com/download 7.1 Prior Hotfixes ==================================================================== [Hotfix 1505] Issue 1: A core dump issue happens when Deep Discovery Web Inspector is deployed in proxy mode while an upstream proxy is enabled. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Solution 1: This hotfix enables Deep Discovery Web Inspector to handle the resulting error properly to prevent the core dump issue. The following enhancements are included in this Hotfix: Enhancement 1: This hotfix enables Deep Discovery Web Inspector to support the passing of Differentiated Services Code Point (DSCP) and the Time to Live (TTL) mechanism from clients to the server in transparent bridge mode. Enhancement 2: This hotfix enables Deep Discovery Website Inspector to switch to the backup DNS server if it cannot connect to the current DNS server. 8. Contact Information ======================================================================== A license to Trend Micro software usually includes the right to product updates, pattern file updates, and basic technical support for one (1) year from the date of purchase only. After the first year, you must renew Maintenance on an annual basis at Trend Micro's then-current Maintenance fees. Contact Trend Micro via fax, phone, and email, or visit our website to download evaluation copies of Trend Micro products. https://www.trendmicro.com/en_us/contact.html NOTE: This information is subject to change without notice. 9. About Trend Micro ======================================================================== Smart, simple, security that fits. As a global leader in IT security, Trend Micro develops innovative security solutions that make the world safe for businesses and consumers to exchange digital information. Copyright 2020, Trend Micro Incorporated. All rights reserved. Trend Micro, the t-ball logo, OfficeScan, Trend Micro Security (for Mac), Control Manager, Trend Micro Apex One, and Trend Micro Apex Central are trademarks of Trend Micro Incorporated and are registered in some jurisdictions. All other product or company names may be trademarks or registered trademarks of their owners. 10. License Agreement ======================================================================== View information about your license agreement with Trend Micro at: https://www.trendmicro.com/en_us/about/legal.html Third-party licensing agreements can be viewed: - By selecting the "About" option in the application user interface - By referring to the "Legal" page of the Administrator's Guide