Release Notes for IMail Anti-virus powered by Symantec™ v7.0.2.4

In this File

Symantec 7.0.2.4 Release Notes

IMail Anti-virus powered by Symantec™ for IMail Server is an add-on product for IMail Administration Server.

Ipswitch IMail Server provides Symantec's Scan Engine technology.

Product Description

IMail Anti-virus powered by Symantec™ for IMail Server is an add-on product for IMail Administration Server. Ipswitch IMail Server provides Symantec's Scan Engine technology.

IMail Anti-virus powered by Symantec™ integrates Symantec's Scan Engine technology, with your IMail Server software. Symantec™ Scan Engine is a TCP/IP server and programming interface that enables Ipswitch, Inc. to incorporate support for Symantec™ content scanning technologies into their proprietary applications. The Scan Engine integrates proprietary and patented URL filtering scanners, and industry-leading anti-virus technology for fast, scalable, and reliable content scanning services to help organizations protect against viruses, spyware, and other malware threats.

The IMail Anti-virus powered by Symantec™ server checks all incoming and outgoing mail for viruses, worms, trojan horses, and other malware. Live Update provides continuous updates to combat the latest viruses.

The anti-virus scan checks each message, isolates infected files, and reports the results. If a virus is detected, the anti-virus software can attempt to repair the infected file. It can also redirect, delete or bounce a message. A log file entry is generated and an alert can be sent to the administrator's mailbox.

Symantec Scan Engine Web Administrator

You can access Symantec’s Scan Engine administration settings through the Symantec™ Anti-virus Scan Engine Web Administrator. You can access the Scan Engine Web Administrator at the IP address entered in the Server IP Address on the Anti-virus Settings page followed by :8004 (the default port for the Scan Engine Web Administrator).

For example:
https://123.100.100.80:8004/

Activating Symantec AV Licenses

After the installation completes you will need to log into the Symantec Scan Engine Web Administrator. To do this open a web browser on the server and navigate to https://localhost:8004
Login with 'Administrator' as the user name and use the password you specified during the install.
After logging in click on System on the left toolbar then License (you should already be on this page if no licenses are currently installed).
Click Install License and select the license file provided to you and click Install. Repeat this step if you have more than one license file.

What's New with Scan Engine 7.0.2.4

The Symantec Scan Engine Web Administrator has been updated to support external authentication. It now requires both a user name and password when logging in. When logging in, use 'administrator' as the user name and the password you specified during the install.
Added support for Java JRE 1.7.
Enhanced scanning for MS Office documents
Added Support for Windows Server 2008 Japanese (32-bit and 64-bit), Windows Server 2008 R2 Japanese (64-bit), and Windows Server 2012 (64-bit)

What's New with Scan Engine 5.2.13

The IMail Anti-virus powered by Symantec™ installation has been modified to install Java Runtime Environment 6.0 (1.6) update 25, as Symantec™ Anti-virus has a requirement for it.

Warning: Only Java Runtime Environment 6.0 (1.6) update 25 will properly support the Symantec Scan Engine. Any other version of Java must be removed before IMail Anti-virus powered by Symantec™ can be installed.

To view actual Symantec™ release notes click here.

What's New with Scan Engine 5.2

Improved performance through changes to default tuning parameters.
New Java and .NET API’s (in addition to current C++)
Rapid release anti-virus definition support
Resource consumption reporting including details on:
- Running threads
- Scan statistics
- Number of processors in use by scan engine
- Log file size and available disk space

Previous Scan Engine changes:

Scan Engine admin now requires SSL on port 8004.
The admin no longer uses a username. Only a password is required. If the password is not set during installation then access is not restricted.

Release Notes (Fixes and Improvements)

Symantec Scan Engine 5.2.8

Symptom: SSE in RPC mode will crash if there are 6 or more IP addresses in the RPC client list.
Symptom: Cannot Add Local Categories when using Java 6 with SSE 5.2.5
Symptom: A specific sample triggers malformed container error
Introduced an environment variable SSE_CRASH_LOG_DIR to accept directory location for creation of dump file.
Symptom: Scan engine does not process any request even if bombarded with 20 threads.

Symantec Scan Engine 5.2.7

Symptom: During URL ICAP filtering, unexpected behavior is seen while parsing URL/Host field.
Symptom: DBCS file names are not correctly logged when file scanning is bypassed by FileSizeScanThreshold parameter.

Symantec Scan Engine 5.2.6

Symptom: Notification message cannot be inserted while scanning a virus-attached email that doesn't contain a message body.
Symptom: The entire LZH container file is removed as an infected file even if it contains virus file and normal clean files inside.
Symptom: The line feed code in deleted*.txt file is defined in LF, not CR+LF.
Symptom: Symantec Scan Engine crashes while querying file information for a file on the NetApp Filer that has a Modified Date earlier than 1970.
Symptom: Symantec Scan Engine 5.2/5.1 fails to install when the installing user account contains "!" in its name.
Symptom: Extra "**N" string is inserted in the last part of deleted*.txt file.
Symptom: Symantec Scan Engine should enable PDF engine by default.
Symptom: The exclusion feature on the Command Line Scanner interprets any text to the right of the first '.' character as the extension, instead of searching for the last '.' character in the filename.

Symantec Scan Engine 5.2.5

Symptom: Notification message gets garbled for a Japanese email with infected ZIP container.
Symptom: Symantec Scan Engine support for ZIP with Unicode file names.
Symptom: Symantec Scan Engine support for WinZip's Enhanced Deflate compression algorithm.
Symptom: Certain .zip files cause Decomposer Error 40 when scanned with Symantec Scan Engine.
Symptom: Need Boolean configuration control variable to suppress the "Unknown Algorithm" errors to WARNING level.
Symptom: Symantec Scan Engine crashes on a specific message with RAR.

Symantec Scan Engine 5.2.4

New Platform Support. Symantec Scan Engine 5.2.4 now supports the following Windows Operating Systems in addition to the existing ones.

Windows Server 2008 (32-bit)
Windows Server 2008 (64-bit)
Windows Server 2003 (64-bit)

Note: Symantec Scan Engine runs as a 32-bit process on 64-bit platforms.

Symantec Scan Engine 5.2.3

The issue with the symcscan process consuming all CPU resources even without any processing has been corrected.
Symantec Scan Engine was corrected for the corrupt notification message inside the email due to DBCS (Japanese, Turkish, German, etc.) file name.

Symantec Scan Engine 5.2.2

Symantec Scan Engine fixed the request for an incorrect path from the Filer when the path contains a filename with a double byte character "S".

Symantec Scan Engine 5.2.1

Symantec Scan Engine fixed the failure to scan files with certain foreign characters in the file name.

System Requirements

Supported Operating Systems

Windows Server 2003 (32-bit)
Windows Server 2003 (64-bit)
Windows Server 2003 R2 (32-bit)
Windows Server 2008 (32-bit or 64-bit)
Windows Server 2008 R2 (32-bit or 64-bit)

Note: Symantec Scan Engine runs as a 32-bit process on 64-bit platforms.

Supported Browsers

Mozilla Firefox 12 or later
Microsoft Internet Explorer 8 or later

Hardware

1.4 GHz Pentium 4
1 GB RAM
500 MB hard disk space available
1 NIC running TCP/IP with a static IP address

Other Software

IMail Server v11.5 and later
Java Runtime Environment 6.0 (1.6) update 25 (included in the IMail Anti-virus powered by Symantec™ installer)

Installing/Upgrading

IMail Anti-virus powered by Symantec™ is included separately from the IMail Server installation. IMail Anti-virus powered by Symantec™ Installation will enable the anti-virus features within IMail Administration Server to activate after successful installation of the IMail Anti-virus powered by Symantec™ Server.

To begin the installation, do one of the following:

If you purchased the IMail Anti-virus powered by Symantec™, insert the installation CD into the CD/DVD drive. If the CD does not automatically start the installation wizard, click the Windows Start button, select Run, then enter the CD/DVD drive letter followed by autorun.exe. For example, enter D:\autorun.exe.

If you downloaded IMail Anti-virus powered by Symantec™ from the Ipswitch Web site, double-click the downloaded file (PremiumAV.exe).

On the installation screen, select the components you want to install, then click Install. Follow the on-screen instructions.

Upon successful installation, open IMail Administrator, and click on the new Anti-virus tab at the top of the page.

Uninstalling

1. Open the Add/Remove Programs applet in the Windows Control Panel.

2. Select the Anti-virus program you want to uninstall, and follow the on-screen instructions.

For More Information

For technical help and solutions, visit our Support Center at www.imailserver.com/Support/ featuring a knowledge base, user guides, discussion lists, patches, upgrades, and live technical support options.

The software described in this document is furnished under a license and may be used or copied only in accordance with the terms of that license.

Copyright © 1995-2012 by Ipswitch, Inc. All rights reserved. IMail, the IMail logo, WhatsUp, the WhatsUp logo, WS_FTP, the WS_FTP logos, Ipswitch Collaboration Suite, Ipswitch Collaboration logo, Ipswitch Instant Messaging, and the Ipswitch Instant Messaging logo, Ipswitch, and the Ipswitch logo are trademarks of Ipswitch, Inc. Other products or company names are or may be trademarks or registered trademarks and are the property of their respective companies.

No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transferred without the expressed prior written consent of Ipswitch, Inc.