Release Notes for IMail's Symantec Scan Engine v5.2

In this File

Symantec Anti-Virus for IMail Server is an add-on product for IMail Administration Server.

Ipswitch IMail Server provides Symantec's Scan Engine technology as the Premium Anti-Virus Edition.

Product Description

Premium Anti-Virus for IMail
IMail Premium Anti-Virus integrates an anti-virus server, powered by Symantec's Scan Engine technology, with your IMail Server software. Symantec Scan Engine is a TCP/IP server and programming interface that enables Ipswitch, Inc. to incorporate support for Symantec content scanning technologies into their proprietary applications. The Scan Engine integrates proprietary and patented URL filtering scanners, and industry-leading anti-virus technology for fast, scalable, and reliable content scanning services to help organizations protect against viruses, spyware, and other malware threats.

The IMail Anti-Virus server checks all incoming and outgoing mail for viruses, worms, trojan horses, and other destructive code. Live Update provides continuous updates to combat the latest viruses.

The anti-virus scan checks each message, isolates infected files, and reports the results. If a virus is detected, the anti-virus software can attempt to repair the infected file. It can also redirect, delete or bounce a message. A log file entry is generated and an alert can be sent to the administrator's mailbox.

Symantec Scan Engine Web Administrator

You can access Symantec's Scan Engine protocols and administration settings through Symantec Anti-Virus Scan Engine Web Administrator. You can access the Scan Engine Web Administrator at the IP address entered in the Proxy Server IP Address on the Anti-Virus Settings page followed by :8004 (the default port for the Scan Engine Web Administrator).

For example:
http://123.100.100.80:8004. The default password for the Scan Engine Web Administrator is admin. The Symantec Anti-Virus Scan Engine Administration page appears.

What's New with Scan Engine 5.2

• Improved performance through changes to default tuning parameters.
• New Java and .NET API's (in addition to current C++)
• Rapid release anti-virus definition support
• Resource consumption reporting including details on:
  • Running threads
  • Scan statistics
  • Number of processors in use by scan engine
  • Log file size and available disk space

Previous Scan Engine changes:

• Scanning now uses ICAP mode on port 1344 rather than Native mode on Port 7777.
• Scan Engine admin now requires SSL on port 8004.
• The admin no longer uses a username. Only a password is required. If the password is not set during installation then access is not restricted.

Release Notes (Fixes and Improvements)

• Fixed DoS vulnerabilites. Two Denial of Service (DoS) vulnerabilities were identified impacting older versions of the Symantec Decomposer when parsing RAR archive content for malicious content. http://www.symantec.com/avcenter/security/Content/2008.02.27.html
• IMail Premium Anti-Virus incorporates Symantec Scan Engine 5.2
• New Premium Anti-Virus installations.
  • The IMail Administration > Anti-Virus Setting for "Infected File Action" will now default to "Delete File" (previous default was "Bounce").
  • All upgrade installations will remain unaffected.
• Install/Upgrade - Premium Anti-Virus for IMail has been modified to use ICAP protocol (port 1344) for version 10 and later.

Known Issues

• Symantec's Scan Engine requires Java Runtime Environment 5.0 Update 14 to be installed, which is part of the IMail Premium Anti-Virus installation if not already installed.

  More information and download can be found at: http://java.sun.com/products/archive/j2se/5.0_14/index.html

• Symantec's Scan Engine and LiveUpdate require Internet Explorer version 6.0 or later be installed on the system.
• Symantec's Scan Engine requires and creates the following directory for processing: <system_drive>:\Temp

  This directory should not be deleted, moved or renamed. This directory should not be scanned by another virus detection program as this would conflict with the operation of Scan Engine.

System Requirements

Supported Operating Systems

• Windows 2000 Server with the latest service pack
• Windows Server 2003 (32-bit)
• Windows Server 2003 R2 (32-bit)

Supported Browsers

• Mozilla Firefox 1.5 or later
• Microsoft Internet Explorer 6 (SP1) or later

Minimum Hardware Configuration

• 2.4 GHz Pentium 4
• 1 GB RAM
• 500 MB hard disk space available
• 1 NIC running TCP/IP with a static IP address
• Web-based Administration requires Microsoft Internet Connection

Installing/Upgrading

IMail Anti-Virus Premium Edition is included separately from the IMail Server installation. IMail Anti-Virus Installation will enable the anti-virus features within IMail Server and install the Anti-Virus Server.

To begin the installation, do one of the following:

• If you purchased the IMail Premium Anti-Virus, insert the installation CD into the CD/DVD drive. If the CD does not automatically start the installation wizard, click the Windows Start button, select Run, then enter the CD/DVD drive letter followed by autorun.exe. For example, enter D:\autorun.exe.
• If you downloaded Premium Anti-Virus for IMail from the Ipswitch Web site, double-click the downloaded file (PremiumAV.exe).

On the installation screen, select the components you want to install, then click Install. Follow the on-screen instructions.

Upon successful installation, open IMail Administrator, and click on the new Anti-Virus tab at the top of the page.

Uninstalling

1. Open the Add/Remove Programs applet in the Windows Control Panel.

2. Select the Anti-Virus program you want to uninstall, and follow the on-screen instructions.

For More Information

You can download User Guides and view other information at the IMail Support Center at http://www.imailserver.com/Support/.

Copyright

The software described in this document is furnished under a license and may be used or copied only in accordance with the terms of that license.

Copyright © 1995-2008 by Ipswitch, Inc. All rights reserved. IMail, the IMail logo, WhatsUp, the WhatsUp logo, WS_FTP, the WS_FTP logos, Ipswitch Collaboration Suite, Ipswitch Collaboration logo, Ipswitch Instant Messaging, and the Ipswitch Instant Messaging logo, Ipswitch, and the Ipswitch logo are trademarks of Ipswitch, Inc. Other products or company names are or may be trademarks or registered trademarks and are the property of their respective companies.

No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transferred without the expressed prior written consent of Ipswitch, Inc.