----------------------------------------------------------------------- InterScan VirusWall version 3.32 from Trend Micro, Inc. ----------------------------------------------------------------------- (c) Copyright for Trend Micro Inc. 1997-9 INDEX for the Release Note: ======================================= 1. Introduction 2. System Requirements 3. Installation Notes 4. New Features/Enhancements 5. Support Structure 1. Introduction: ---------------- Trend InterScan VirusWall (r) is a suite of antivirus programs that work at the Internet gateway to detect and clean virus-infected files before they enter the corporate LAN. • E-mail VirusWall monitors all inbound and outbound email messages for viruses, especially Macro viruses. • Web VirusWall monitors all HTTP traffic. It checks for viruses, malicious Java & ActiveX applets, and provides enterprise-wide Java and Authenticode standards. • FTP VirusWall ensures that all file transfers made via FTP are virus-free. All three VirusWalls can be installed on the same machine, or each installed on it's own machine. This machine may be either a dedicated server, or the SMTP, HTTP, and/or FTP server itself. 2. System Requirements: ---------------------- Install InterScan on a NT 4.0 server, build 1381 or later, with Service Pack 3. Other requirements: • PC with a Pentium 200 or faster processor • 64 MB of memory; 128 MB recommended • 25 MB disk space for program files; 100 to 500 MB free disk space for swap files • A monitor with 800x600 or greater resolution Web VirusWall requires the following: • Authenticode 2.0 • An HTTP proxy server (one is included with package) 3. Installation Notes: IMPORTANT! ---------------------- If you are upgrading from a 3.x version of InterScan VirusWall: • Setup will ask you if you want to replace your existing configuration. Choose "yes" to replace the existing configuration. "No" will cancel the installation. • After installing InterScan VirusWall 3.3, you will need to reconfigure InterScan. • If the InterScan setup detects eManager installed on your system, it will ask you if you want to save your current plug-in configurations. Choose "yes" and keep the configuration. If you choose "no", you will need to reinstall the plug-ins. • Do not uninstall the previous version of InterScan prior to upgrading to InterScan 3.3 if you have eManager installed on your system. If you do, you will need to reinstall eManager. 4. New features and enhancements: --------------------------------- NEW FEATURES ADDED SINCE INTERSCAN NT 3.2 Enhancements in 3.32 ------------------ This update applies to the stand-alone and CVP versions of E-Mail VirusWall. Version 3.32 will detect the newly discovered "BubbleBoy" worm. Enhancements in 3.31 ------------------ BUG FIX: Fixed potential security risk where an unauthorized user could exploit InterScan with a buffer overflow,allowing access to the InterScan system. Enhancements in 3.3 ------------------ 1. Added support for automatic cleaning of ZIP files in E-mail VirusWall. 2. Added support for daily pattern updates. 3. Added support for logging pattern file updates. 4. Added support for Trend InterScan Y2K Scanner. Enhancements in 3.23 -------------------- 1. Corrected implementation of SMTP "RSET" command to properly clear recipient list. All software should be upgraded to version 3.23. 2. Corrected potential problem of not delivering NDR message when in forward mode and SMTP 5xx error is received by remote server. 3. Cleanup temporary files that can be left over when InterScan is stopped while files are being scanned by the virus engine. Enhancements from 3.22 ---------------------- 1. Additional message text feature for outbound mail now shows up in the message text itself as opposed to another attachment for MIME messages with attachments. 2. When a scan engine exception occurs, the default behavior is to pass mail through without virus scanning. To configure InterScan to stop accepting e-mail, set "VsapiFailRejectConnections" to "yes" in the "[EMail-Scan]" section of intscan.ini This will stop the virus scanning service when a scan engine exception occurs. Email traffic stops. You must restart InterScan to begin accepting email. Enhancements from 3.21 ---------------------- 1. NEW FEATURE: Limiting the number of scanning threads This new version supports limiting the number of scanning threads. A scanning thread is created after message data has been received through SMTP. Limiting the number of threads will prevent your system from being overloaded. To configure this option, edit your intscan.ini so that in the "[EMail-Scan]" section you add the following parameter: [EMail-Scan] MaxScanningThreadsProc=10 This will limit the number of messages being scanned by InterScan at the same time to 10 per processor. So if the machine has two CPUs, only 20 messages are scanned at the same time. Any additional SMTP requests to InterScan will be sent a "452 Server too busy" response until the number of messages being scanned drops below the maximum. It is the responsibility of the sending server to reattempt delivery later when the InterScan server is not as busy. 2. NEW FEATURE: Added "medium" log level to write the subject and mqueue filename of message during reception and delivery. Three log levels are available: LOW - "loglevel=0" MEDIUM - "loglevel=1" HIGH - "loglevel=2" "medium" level is "loglevel=1". This parameter should be added to the "[EMail-Scan]" section of the intscan.ini file. Note: if the "loglevel" parameter does not exist, you must add it to the "[EMail-Scan]" section. 3. NEW FEATURE: Delete temp files in the Windows NT directory that start with ~*.tmp which can be created and left over by NT. This cleanup happens during program startup. 4. BUG FIX: To correctly retry delivery of email periodically when MX records of DNS server are unavailable for a particular mail domain. If it is found that the DNS server used by InterScan does not have MX records for a particular destination domain, this version retries delivery of email periodically for a set number of hours (say, every 15 minutes for 24 hours), depending on the configuration settings. 5. Support ------------------ Thank you for choosing InterScan VirusWall NT. If you have any questions regarding InterScan VirusWall NT, please contact Trend Micro, Inc. at: 10101 North De Anza Blvd. 4th Floor Cupertino, CA 95014 U.S.A. Tel: 800-228-5651 (U.S. and Canada) Tel: 408-257-1500 (outside U.S. and Canada.) Fax: 408-257-2003 BBS: 408-255-5221 E-Mail: support@trendmicro.com URL : http://www.antivirus.com