RELEASE NOTES F-Secure Anti-Virus for Microsoft Exchange Version 9.10 build 229

Transcription

1 RELEASE NOTES F-Secure Anti-Virus for Microsoft Exchange Version 9.10 build 229 Copyright F-Secure Corporation. All Rights Reserved. Portions Copyright 2004 BackWeb Technologies Inc. Portions Copyright 2003 Commtouch Software Ltd. This product includes software developed by the Apache Software Foundation ( Copyright The Apache Software Foundation. All rights reserved. This product includes PHP, freely available from Copyright The PHP Group. All rights reserved. This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit ( Copyright The OpenSSL Project. All rights reserved. This product includes cryptographic software written by Eric Young Copyright Eric Young All rights reserved. This product includes software written by Tim Hudson This product includes optional Microsoft SQL Server 2005 Express Edition. Copyright 2007 Microsoft Corporation. All rights reserved. This product may be covered by one or more F-Secure patents, including the following: GB , GB , GB , GB , GB , GB , GB General This document contains late-breaking information about F-Secure Anti-Virus for Microsoft Exchange We strongly recommend you to read the entire document before installing the software. 2. About F-Secure Anti-Virus for Microsoft Exchange F-Secure Anti-Virus for Microsoft Exchange protects Microsoft Exchange 2003/2007/2010 users from viruses, worms, trojans, spyware, adware, and other security threats. The product scans messages and attachments in both incoming and outgoing as well as internal mail traffic. It also inspects documents and notes posted to Exchange public folders. With F-Secure Anti-Virus for Microsoft Exchange, protection is transparent and always on as the scanning is done in real-time. In addition to blocking viruses and other malicious code, the solution provides spam, content, and attachment filtering. F-Secure Spam Control detects and filters spam messages from an organization s traffic by using advanced content and traffic pattern analysis and categorization. It provides real-time protection against all types of spam, regardless of its content, format or language. 3. What's new 3.1 Changes in the new release This section describes features and other changes that have been implemented in F-Secure Anti-Virus for Microsoft Exchange 9.10: Real-time attachment stripping it is now possible to block disallowed attachments from being published to Exchange public folders or from being saved to the user s mailbox. Support for policy setting restrictions product settings can now be changed in the Web console even if the product is installed in centralized administration mode. To prevent users from changing the settings through the Web console, the administrator can use the Final flag in the Policy Manager Console. Bug fixes see the list of fixed issues below. 3.2 Key features Compared with 8-series of the product, F-Secure Anti-Virus for Microsoft Exchange 9.x release introduces the following key features:

2 Microsoft Exchange Server 2010 support F-Secure Anti-Virus for Microsoft Exchange 9.10 supports the latest version of Microsoft Exchange Server. Windows Server 2008 R2 support F-Secure Anti-Virus for Microsoft Exchange 9.10 supports Microsoft Windows Server 2008 R2 Standard/Enterprise editions. Performance improvements - F-Secure's multi-engine protection has been upgraded to offer faster malware scanning and smaller memory usage while keeping the detection rate on highest possible level. Updatable scanning engines now also the scanning engines can be added or updated via automatic updates keeping the customer s protection up-to-date. Common Web console for server products when F-Secure Anti-Virus for Microsoft Exchange 9.10 and F-Secure Anti-Virus for Windows Servers 9.00 are installed on the same server, both products can be easily managed with a common Web Console. Localized Web Console customers can select the preferable Web Console interface language. The following languages are supported right now: English, German, French, Japanese, Spanish and Italian. Adding disclaimers predefined disclaimers can be added to all outgoing messages. F-Secure Spam Control The previously optional F-Secure Spam Control module is now delivered in the software package by default 3.3 Dropped or unsupported features The following features have been dropped from the F-Secure Anti-Virus for Microsoft Exchange 9.x release: Microsoft Exchange Server 2000 the product does not support Microsoft Exchange Server 2000 any more. Windows 2000 Server family the product does not support Windows 2000 Server and Windows 2000 Advanced Server platforms any more. 3.4 Fixed issues from the previous releases This section lists the most important issues fixed in F-Secure Anti-Virus for Microsoft Exchange 9.10: Disclaimers are not migrated after upgrade [64760] Some messages cause unhandled exception on scanning [68280] Unexpected shutdown during engine update may prevent the product from work [69403] Installation fails on some MS Exchange 2010 environments [71478] File Type Recognition feature does not work for On-Demand scanning on Microsoft Exchange 2003 and 2007 [71745] Error message occurs on updating Aquarius engine databases [72039] Aquarius temporary files are blocked by F-Secure Anti-Virus for Windows Servers [72292] Spam s are not moved to Junk folder [72387] Disclaimers remove underscore characters in message bodies [72772] For some time zones quarantined items are displayed with incorrect time [71908] Some other issues that prevent proper work of the product on certain environments. 4. Installation and system requirements Before you install the product, we recommend you review sections in this topic to ensure that your network, hardware, software, and other system components meet the requirements for F-Secure Anti-Virus for Microsoft Exchange When running multiple services on the same system, the minimum hardware requirements may not be sufficient. 4.1 Installation on Microsoft Exchange Server 2003 To install F-Secure Anti-Virus for Microsoft Exchange 9.10 on Microsoft Exchange Server 2003, the following minimum hardware and system requirements are recommended. Hardware Processor: 32-bit processor: Intel Pentium 4 or compatible 2GHz or faster

3 Memory: Disk space to install: Disk space for processing: 1GB of RAM 300 MB 10 GB or more Operating system The product can be installed on a computer running one of the following systems: Microsoft Windows Server 2003, Standard Edition with the latest service pack Microsoft Windows Server 2003, Enterprise Edition with the latest service pack Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Small Business Server 2003 Microsoft Small Business Server 2003 R2 Microsoft Exchange Server The product can be installed on a computer running the following Microsoft Exchange Server versions: Microsoft Exchange Server 2003 with the latest service pack Cluster environment F-Secure Anti-Virus for Microsoft Exchange 9.10 can be installed on the Windows Server 2003 Enterprise Edition cluster. The product supports two-node Active-Passive and Active-Active cluster environments. 4.2 Installation on Microsoft Exchange Server 2007 To install F-Secure Anti-Virus for Microsoft Exchange 9.10 on Microsoft Exchange Server 2007, the following minimum hardware and system requirements are recommended. Hardware Processor: Intel x64 processor with Extended Memory 64 Technology (EM64T) AMD processor that supports the AMD64 platform Memory: Disk space to install: Disk space for processing: Operating System 2GB of RAM 300 MB 10 GB or more The product can be installed on a computer running one of the following systems: Microsoft Windows Server 2003, Standard x64 Edition with the latest service pack Microsoft Windows Server 2003, Enterprise x64 Edition with the latest service pack Microsoft Windows Server 2003 R2, Standard x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2008, Standard Edition Microsoft Windows Server 2008, Enterprise Edition Microsoft Windows Server 2008 R2, Standard Edition Microsoft Windows Server 2008 R2, Enterprise Edition Microsoft Small Business Server 2008 Microsoft Exchange Server The product can be installed on a computer running one of the following Microsoft Exchange Server versions: Microsoft Exchange Server 2007 (64-bit version) with the latest service pack

4 Microsoft Small Business Server 2008 Important note: The CDOEX update is required if you plan to install and use F-Secure Anti-Virus for Microsoft Exchange on Microsoft Exchange Server 2007 running on Microsoft Windows Server 2008 R2. See the Setup and configuration section below for more details. Note: The 32-bit evaluation version of Microsoft Exchange Server 2007 is not supported. F-Secure Anti-Virus for Microsoft Exchange 9.10 supports the following roles of Microsoft Exchange Server 2007: Edge Server role Hub Server role Mailbox Server role Combo Server (Mailbox Server and Hub Server roles) Cluster environment F-Secure Anti-Virus for Microsoft Exchange 9.10 supports the following cluster models of Microsoft Exchange Server 2007: Cluster Continuous Replication (CCR) Single Copy Cluster (SCC) 4.3 Installation on Microsoft Exchange Server 2010 To install F-Secure Anti-Virus for Microsoft Exchange 9.10 on Microsoft Exchange Server 2010, the following minimum hardware and system requirements are recommended. Hardware Processor: Intel x64 processor with Extended Memory 64 Technology (EM64T) AMD processor that supports the AMD64 platform Memory: Disk space to install: Disk space for processing: Operating system 4GB of RAM 300 MB 10 GB or more The product can be installed on a computer running one of the following systems: Microsoft Windows Server 2008, Standard Edition Microsoft Windows Server 2008, Enterprise Edition Microsoft Windows Server 2008 R2, Standard Edition Microsoft Windows Server 2008 R2, Enterprise Edition Microsoft Exchange Server F-Secure Anti-Virus for Microsoft Exchange 9.10 supports the following roles of Microsoft Exchange Server 2010: Edge Server role Hub Server role Mailbox Server role Combo Server (Mailbox Server and Hub Server roles) Cluster environment F-Secure Anti-Virus for Microsoft Exchange 9.10 supports Microsoft Exchange Server 2010 high-availability solutions based on Database Availability Groups (DAG). 4.4 SQL Server requirements

5 The product requires Microsoft SQL Server for the quarantine management. The following versions of Microsoft SQL Server are recommended to use: Microsoft SQL Server 2000 (Enterprise, Standard or Workgroup Edition) with Service Pack 4 Microsoft SQL Server 2000 Desktop Engine (MSDE) with Service Pack 4 Microsoft SQL Server 2005 (Enterprise, Standard, Workgroup or Express Edition) with the latest service pack Microsoft SQL Server 2008 (Enterprise, Standard, Workgroup or Express Edition) Microsoft SQL Server 2005 Express Edition Service Pack 3 is distributed with the product and can be installed during F-Secure Anti-Virus for Microsoft Exchange Setup. Important: We do not recommend using MSDE or Microsoft SQL Server 2005/2008 Express Edition if you are planning to use the centralized quarantine management or if your organization sends and receives a large amount of s. For more information about the limitations of the Microsoft SQL Server 2005/2008 Express Edition or MSDE, see the product manual. 4.5 Centralized management requirements Important: F-Secure Policy Manager 9.00 or later is required if you plan to install the product in the centralized administration mode and manage it with F-Secure Policy Manager Console. F-Secure Policy Manager must be upgraded before installing F-Secure Anti-Virus for Microsoft Exchange. If the product is installed in the centrally administered mode with F-Secure Policy Manager Console version 8.11 or earlier, scanning will not be possible as virus definition database updates for some scanning engines will not be received. 4.6 Additional Windows components Depending on how you deploy the product to your network system, the following Windows components might be required: Microsoft.NET Framework version 2.0 is required to install Microsoft SQL Server 2005 Express Edition. If you plan to have Microsoft SQL Server on the same server, Microsoft.NET Framework version 2.0 must be installed before installing F-Secure Anti-Virus for Microsoft Exchange. Microsoft.NET framework 2.0 can be downloaded from Microsoft Download Center. 4.7 Other requirements Note: For performance and security reasons, it is not possible to install the product on any other than NTFS partition. To administer the product with F-Secure Web Console, one of the following web browser software is required: Microsoft Internet Explorer 6.0 or later Mozilla Firefox 2.0 or later Opera 9.0 or later Any other web browser supporting HTTP 1.0, SSL, Java scripts and cookies may be used as well. Microsoft Internet Explorer 5.5 or earlier cannot be used to administer the product. 5. Setup and configuration 5.1 Installation instructions Note: Before you install F-Secure Anti-Virus for Microsoft Exchange 9.10, uninstall any potentially conflicting products, such as other antivirus or server security software. You need to log in with administrator-level privileges to install F-Secure Anti-Virus for Microsoft Exchange. Refer to the manual for detailed installation instructions. 5.2 Support for Microsoft Exchange Server 2007 on Windows Server 2008 R2 Starting with Service Pack 3, Microsoft Exchange Server 2007 can be installed on Microsoft Windows Server 2008 R2. However, the Collaboration Data Objects for Exchange (CDOEX) feature does not work correctly on Windows Server 2008 R2 and a Windows update is required to fix the problem. The update and installation

6 instructions are available in Microsoft Knowledge Base article It is important to note that the CDOEX update must be installed before installing Microsoft Exchange Server 2007 SP3. Without the CDOEX update applied the on-demand and scheduled scanning features in F-Secure Anti-Virus for Microsoft Exchange will not operate correctly. 5.3 Compatibility with F-Secure Anti-Virus for Windows Servers F-Secure Anti-Virus for Microsoft Exchange 9.10 can be installed on the same server with F-Secure Anti-Virus for Windows Servers In that case F-Secure Anti-Virus for Windows Servers 9.00 must be installed first. Both products can be managed with a common Web Console and the whole solution is named as F-Secure and Server Security. Note: F-Secure Anti-Virus for Microsoft Exchange 9.10 cannot be used with F-Secure Anti-Virus for Windows Servers 8.01 or earlier. Please upgrade F-Secure Anti-Virus for Windows Servers to the latest version before installing F-Secure Anti-Virus for Microsoft Exchange If this is not possible, it is recommended to use F-Secure Anti-Virus for Microsoft Exchange 8.00 with older versions of F-Secure Anti-Virus for Windows Servers. As F-Secure Anti-Virus for Windows Servers 9.00 scans all the files that are accessed on the server in real-time, the scan would interfere with any operation of an scanning product, unless those files were excluded from the real-time scan. During the installation, F-Secure Anti-Virus for Microsoft Exchange 9.10 is configured to exclude all its working folders from the real-time scan. If F-Secure Anti-Virus for Microsoft Exchange configuration is changed in future - for example, the location of the quarantine folder is changed - you need to reconfigure F-Secure Anti-Virus for Windows Servers 9.00 to exclude the correct folder from the real-time scan. Refer to F-Secure Anti-Virus for Windows Servers 9.00 manual for detailed instructions on adding such exclusions. 5.4 Upgrade installation You can upgrade from the previous version of F-Secure Anti-Virus for Microsoft Exchange (6.62, 7.10, 8.00, and 9.00) by running the setup program and following the installation instructions. Please refer to the manual for detailed upgrade instructions. 5.5 Manual installation of Microsoft SQL Server 2005 Express Edition Microsoft SQL Server 2005 Express Edition Service Pack 3 is distributed with the product and included in the product installation package. If you need to install Microsoft SQL Server 2005 Express Edition manually, you can find the link to the installation package on the product setup application or you can download it from Microsoft web site. When installing Microsoft SQL Server, make sure that you select the Mixed mode in the Authentication mode page. To change the authentication mode after the installation, refer to the Microsoft SQL Server documentation. 5.6 Uninstallation instructions To uninstall F-Secure Anti-Virus for Microsoft Exchange, select Add/Remove Programs from the Windows Control Panel. Note: Some files and directories may remain under %ProgramFiles% and user s temporary (%TEMP%) directories after the product has been uninstalled. We recommend that you remove those directories and files manually. 6. Known issues 6.1 Installation and uninstallation Installing F-Secure Policy Manager and Anti-Virus for Microsoft Exchange on the same server [62982] When installing F-Secure Policy Manager and F-Secure Anti-Virus for Microsoft Exchange on the same server, make sure that you specify the correct port number of the Policy Manager Server. If you did not specify the correct port number during the installation, you can change it later with F-Secure Anti-Virus for Microsoft Exchange Web Console (on the General>Administration>Management page). Upgrade from version 6.62: two F-Secure entries remain in Add/Remove programs [63627] When you upgrade from version 6.62, F-Secure Content Scanner Server and F-Secure Automatic Update Agent entries remain in the Windows Add and Remove Programs applet. You can safely ignore them. They will be removed automatically when you uninstall the product.

7 Upgrade from version 6.62: Black and White lists are not migrated to domain level [69513] If you have the lists of blocked/safe senders/recipients defined on the policy domain level, please note that on upgrade these lists will be migrated to the hosts included to the domain and get reset on the domain level. If you need to keep the lists defined for the entire domain, copy the settings from the host to the domain level manually. Upgrade from version 6.62: Real-time Attachment Filtering settings are not migrated [73412] When you upgrade from version 6.62 installed in the centralized management mode the real-time Attachment Filtering related settings are not migrated. Please, re-configure them manually. 6.2 Administration Cannot change some settings from PMC [62469] It is not possible to change Proxy Server authentication settings from F-Secure Policy Manager. Use F-Secure Anti-Virus for Microsoft Exchange Web Console to change them. 6.3 Cluster environments F-Secure Anti-Virus for Microsoft Exchange cluster resource stays off-line after upgrade from version 6.62 [64467] Right after the upgrade, F-Secure Anti-Virus for Microsoft Exchange cluster resource may be off-line. You can bring the cluster resource online manually or by restarting all nodes of the cluster. Messages may not be scanned when Exchange is moved from one cluster node to another [62925] When Exchange cluster groups are moved from one node to another while the product is running on Active- Passive cluster environment, it is possible that F-Secure Anti-Virus for Microsoft Exchange service is down for a short time. This may result that some messages may not be scanned on the transport level while the service is down. However, all messages and attachments are scanned without interruptions on the storage level. Incorrect quarantine statistics are shown when Web Console is open on the passive node [63021] Quarantine and other product statistics are not updated on the passive node as some of the product services are down or suspended. Therefore, when you connect to the Web Console on the passive node, the product status and statistics are not shown correctly. We strongly recommend that you connect to the Web Console using the name or IP address of the cluster instead of the name or IP address of the cluster nodes. 6.4 Disclaimers Disclaimers are not added to messages release from quarantine [67265] Disclaimers are not added to outbound mails manually released from the Quarantine, since it is not possible to say if they are really safe or not. Disclaimer is not added to TNEF mails with empty body [70123] Disclaimer is not added to TNEF encoded mails with empty body, where there is no text and no attachments. This problem occurs only on Microsoft Exchange Server Disclaimer is not added to mails if sender/recipient is in the list of trusted senders/recipients (70124) If the sender or recipient has been included to the Trusted Senders or Trusted Recipients list, the disclaimer will not be added to the message. 6.5 Quarantine Recipients are not listed for quarantined attachments that are blocked in real-time [73434] If malicious or disallowed attachments are blocked during real-time scanning in the Exchange store, they are listed in the Quarantine Query without the name of the corresponding recipient mailbox where they have been blocked. However, the information about the mailbox that contains the malicious or disallowed attachment can be found in the product alerts. 7. Contact information and feedback

8 Please report any technical issues through the F-Secure support web site: You can also consult the product forum available at: Before sending us a problem report, please run F-Secure Support Tool, FSDiag.exe, on the host running F-Secure Anti-Virus for Microsoft Exchange. This utility gathers basic information about hardware, operating system, network configuration and installed F-Secure and third-party software. You can run the F-Secure Support Tool from the Web Console as follows: 1. Log in to the Web Console. 2. Type in the address field of the browser. (If you are accessing the server remotely, use the real IP address of the server instead of ). 3. F-Secure Support Tool starts automatically and the dialog displays the data collection progress. 4. When the tool has finished collecting the data, click Report to download and save the collected data You can also run the FSDiag.exe utility under the F-Secure\Common folder. The tool generates a file called FSDiag.tar.gz. 8. F-Secure license terms F-Secure license terms are included in the software. You must read and accept them before you can install and use the software.