copyright © 2012. trend micro incorporated. all rights reserved. · 2012-12-18 · scanmail™ for...

Trend Micro Incorporated reserves the right to make changes to this document and tothe products described herein without notice. Before installing and using the software,please review the readme files, release notes, and the latest version of the applicable userdocumentation, which are available from the Trend Micro Web site at:

http://docs.trendmicro.com/en-us/enterprise/scanmail-for-microsoft-exchange.aspx

Trend Micro, the Trend Micro t-ball logo, Control Manager, eManager, and ScanMailare trademarks or registered trademarks of Trend Micro Incorporated. All other productor company names may be trademarks or registered trademarks of their owners.

Copyright © 2012. Trend Micro Incorporated. All rights reserved.

Document Part No. SMEM105728_121015

Release Date: December 2012

Document Version No.: 1.0

Product Name and Version No.: ScanMail™ for Microsoft™ Exchange 10.2 SP2

Protected by U.S. Patent No.: 5,951,698

The user documentation for Trend Micro ScanMail for Microsoft Exchange 10.2 SP2 isintended to introduce the main features of the software and installation instructions foryour production environment. You should read through it prior to installing or using thesoftware.

Detailed information about how to use specific features within the software are availablein the online help file and the Knowledge Base at Trend Micro Web site.

Trend Micro is always seeking to improve its documentation. Your feedback is alwayswelcome. Please evaluate this documentation on the following site:

http://www.trendmicro.com/download/documentation/rating.asp

http://www.trendmicro.com/download/documentation/rating.asp

i

Table of ContentsPreface

Preface ................................................................................................................. iv

ScanMail Documentation .................................................................................. v

Audience .............................................................................................................. v

Document Conventions ................................................................................... vi

Chapter 1: Installing ScanMail 10.2 SP2System Requirements ..................................................................................... 1-2

Installation Enhancements ............................................................................ 1-2

Installing Service Pack 2 on Exchange Server 2010/2007/2003 ............ 1-3

Cluster Installations ...................................................................................... 1-12

Troubleshooting Exchange MapiCDO Issues ......................................... 1-13Manually Installing MapiCDO ........................................................... 1-14

Removing Service Pack 2 ............................................................................ 1-14

Chapter 2: Silent InstallationAbout Silent Installations .............................................................................. 2-2

Silent Installation Limitations ............................................................... 2-2

Performing a Silent Installation .................................................................... 2-3Using an Existing Pre-Configured File ............................................... 2-3

Chapter 3: Contacting Trend MicroContacting Technical Support ...................................................................... 3-2

TrendLabs ................................................................................................ 3-2

Speeding Up Your Support Call ................................................................... 3-3

Knowledge Base ............................................................................................. 3-3

Security Information Site ............................................................................... 3-4

ScanMail™ for Microsoft™ Exchange 10.2 SP2 Installation and Upgrade Guide

ii

Appendix A: Glossary

IndexIndex .............................................................................................................. IN-1

iv

Preface

PrefaceWelcome to the Trend Micro™ ScanMail™ for Microsoft™ Exchange Installation andUpgrade Guide. This book contains basic information about the tasks you need toperform to deploy ScanMail to protect your Exchange servers. It is intended for noviceand advanced users of ScanMail who want to manage ScanMail.

This preface discusses the following topics:

• ScanMail Documentation on page v

• Audience on page v

• Document Conventions on page vi

Preface

v

ScanMail DocumentationThe product documentation consists of the following:

• Online Help: Web-based documentation that is accessible from the productconsole

The Online Help contains explanations about ScanMail features.

• Installation and Upgrade Guide: PDF documentation that discussesrequirements and procedures for installing and upgrading the product

• Administrator’s Guide: PDF documentation that discusses getting startedinformation and product management

• Readme File: Contains late-breaking product information that might not be foundin the other documentation. Topics include a description of features, installationtips, known issues, and product release history.

• Knowledge Base: Contains the latest information about all Trend Micro products.Other inquiries that were already answered area also posted and a dynamic list ofthe most frequently asked question is also displayed.

http://esupport.trendmicro.com

NoteTrend Micro recommends checking the corresponding link from the Update Center(http://docs.trendmicro.com/en-us/enterprise/scanmail-for-microsoft-exchange.aspx) forupdates to the documentation.

AudienceThe ScanMail documentation assumes a basic knowledge of security systems, including:

• Antivirus and content security protection

• Spam protection

• Network concepts (such as IP address, netmask, topology, LAN settings)


http://docs.trendmicro.com/en-us/enterprise/scanmail-for-microsoft-exchange.aspx


vi

• Various network topologies

• Microsoft Exchange Server administration

• Microsoft Exchange Server 2010 and 2007 server role configurations

• Various message formats

Document ConventionsThe documentation uses the following conventions.

TABLE 1. Document Conventions

CONVENTION DESCRIPTION

UPPER CASE Acronyms, abbreviations, and names of certaincommands and keys on the keyboard

Bold Menus and menu commands, command buttons, tabs,and options

Italics References to other documents

Monospace Sample command lines, program code, web URLs, filenames, and program output

Navigation > Path The navigation path to reach a particular screen

For example, File > Save means, click File and then clickSave on the interface

Note Configuration notes

Tip Recommendations or suggestions

Important Information regarding required or default configurationsettings and product limitations

Preface

vii

CONVENTION DESCRIPTION

WARNING! Critical actions and configuration options

1-1

Chapter 1

Installing ScanMail 10.2 SP2Install ScanMail 10.2 SP2 locally or remotely to one or more servers using one easy-to-use Setup program.

Topics in this chapter:

• System Requirements on page 1-2

• Installation Enhancements on page 1-2

• Installing Service Pack 2 on Exchange Server 2010/2007/2003 on page 1-3

• Cluster Installations on page 1-12

• Troubleshooting Exchange MapiCDO Issues on page 1-13

• Removing Service Pack 2 on page 1-14


1-2

System RequirementsThe following lists the system requirements for upgrading to Trend Micro™ ScanMail™for Microsoft™ Exchange 10.2 SP2:

• Trend Micro ScanMail for Microsoft Exchange 10.2 or 10.2 Service Pack 1

• Smart Protection Server Versions:

• Trend Micro™ Smart Protection Server 2.5



• Trend Micro™ OfficeScan™ Integrated Smart Protection Server

Download the Smart Protection Server installation package from the Trend Microdownload site:

http://downloadcenter.trendmicro.com/index.php?regs=NABU&clk=latest&clkval=1771&lang_loc=1

• Deep Discovery Advisor 2.92 or later (when integrating with Deep DiscoveryAdvisor)

Installation EnhancementsThis version of ScanMail includes the following installation enhancements:

TABLE 1-1. Installation Enhancements

ENHANCEMENT DESCRIPTION

Deploy to multipleservers

Perform local or remote installations from one setup programand simultaneously install ScanMail 10.2 SP2 to multipleExchange servers.



Installing ScanMail 10.2 SP2

1-3

ENHANCEMENT DESCRIPTION

Support for all clusterplatforms

This service pack can be installed on all cluster platforms thatScanMail 10.2 supports. Simultaneous deployment to allvirtual servers and nodes is supported.

Business continuity Installation of this service pack does not cause a disruption inemail message traffic during deployment.

Improved user interface View installation status and results for each server.

Installing Service Pack 2 on Exchange Server2010/2007/2003

Procedure

1. Click the installation program to start the installation wizard.

The Welcome screen appears.


1-4

2. Click Next to begin the installation.

The License Agreement screen appears.


1-5

3. Click I Accept the terms in the license agreement to agree to the terms of theagreement and continue installation. Click Next to continue.

NoteIf you do not accept the terms, click I do not accept the terms in the licenseagreement. This terminates the installation without modifying your operatingsystem.

The Select an Action screen appears.


1-6

4. Select Install and click Next to continue.

The Select Target Servers screen appears.


1-7

5. Select the computers to which you want to install ScanMail.

a. Perform one of the following:

• Type the name of the server to which you want to install in theComputer name field and click Add to add the computers to the list ofservers.

• Click Browse and browse the computers that are available on yournetwork, then double-click the domain or computers you want to add tothe list.

• Click Remove to remove a server from the list.

b. Click Next to save your list of target servers and continue the installation.


1-8

NoteThe Setup program can install ScanMail to a number of single servers or to all thecomputers in a domain. Use an account with the appropriate privileges to accessevery target server.

The Log On screen appears.

6. Log on to the target servers where you want to install ScanMail. Click Next tocontinue.

The Checking Target Server System Requirements screen appears.


1-9

7. Review the results of each target server and click Next to continue.

The Review Settings screen appears.


1-10

8. Review settings and click Install to continue.

The Installation Progress screen appears.


1-11

9. View the progress of the installation and click Next when the installationcompletes.

The Installation Complete screen appears.


1-12

10. Click Finish to exit the Setup program.

The Readme file displays.

Cluster InstallationsThis installation can detect and install on each Exchange Virtual Server (EVS) in acluster. Type the node name, Exchange Virtual Server (EVS) name, or cluster namefrom the Select Target Servers screen.


1-13

Troubleshooting Exchange MapiCDO IssuesThe Search & Destroy feature included in the Service Pack 2 release requires theinstallation of Microsoft Exchange Messaging API (MapiCDO) on the Exchange server.During the Service Pack 2 installation, ScanMail automatically installs MapiCDO. If anerror occurs during the MapiCDO installation, the following Installation Progressmessage appears.

FIGURE 1-1. Installation Progress screen displaying MapiCDO error


1-14

“Partially completed. The installation of Microsoft Exchange Messaging API(MapiCDO) was unsuccessful. Refer to the Installation Guide for manual installationinstructions.”

Manually Installing MapiCDO

NoteIf MapiCDO does not exist on the ScanMail server, the Search & Destroy feature does notfunction. All other ScanMail features continue to function normally.

Procedure

1. On the ScanMail server, open the following folder:

<SMEX_install _package>\x64\File\SMEX\ExchangeMapiCdo

2. Run the ExchangeMapiCdo installation package.

3. Restart the ScanMail Master Service.

Removing Service Pack 2Removing Service Pack 2 reverts ScanMail to the previously installed version.

NoteUninstalling Service Pack 2 does not delete the Search & Destroy search tasks in theExchange server or the mailbox search results in the Exchange discovery mailbox. TrendMicro recommends deleting all Search & Destroy items in the Exchange server beforeuninstalling Service Pack 2.

Procedure

1. Run the Service Pack 2 setup.exe program and select Uninstall on the Selectan Action screen.


1-15

2. For cluster installations, remove Service Pack 2 from the whole cluster for eachcluster node virtual server.

2-1

Chapter 2

Silent InstallationInstall ScanMail locally or remotely to one or more servers using silent installation.

Topics in this chapter:

• About Silent Installations on page 2-2

• Performing a Silent Installation on page 2-3


2-2

About Silent InstallationsThis version of ScanMail supports silent installation. The steps in silent installationfollow the same steps as regular installation. Refer to the corresponding installationsections for the different server roles.

The differences between the standard installation process and silent installation are:

• The Welcome screen displays a message reminding you that ScanMail records theinstallation process into a pre-configured file.

• In recording mode, ScanMail only records the user name and password and doesnot log on to target server(s).

• Once the recording completes, the file name and location information is listed onthe setup screen.

• Checking Target Server System Requirements and Selecting an Actionscreens do not display.

Silent Installation LimitationsThe following lists the limitations for silent installation:

• Silent installations are only supported on local computers.

• Generate the pre-configured file by using recording mode the first time. Then,modify settings in the pre-configured file. However, do not modify settings in theDo not edit sections.

• Record settings separately for target servers with different languages. For example,do not apply pre-configured files recorded on an English operating system to atarget server with a German operating system.

Silent Installation

2-3

Performing a Silent Installation

Procedure

1. Launch the Windows command prompt.

2. Locate the ScanMail for Microsoft Exchange 10.2 SP2 directory.

3. Type Setup /R <config_file> to start recording mode.

4. Type Setup /S <config_file> /output <result_file>] to begin silentinstallation.

Using an Existing Pre-Configured FileThe following table displays the parameters you can use to configure silent installationsettings.

TABLE 2-1. Silent Installation Setting Parameters

PARAMETER DESCRIPTION

Setup /H |Help| ? Displays the Help screen.

Setup /R <config_file path> Starts recording mode. If the path is empty,the default path is the Windows directoryC:\Windows\temp\setup-silent-config.dat

Setup /S <config_file> Performs a silent installation with the filename you specify.

Setup /output <result_file> Specifies the result file and name. Thedefault path is the Windows directory C:\Windows\temp\ScanMail_SilentOutput.txt

3-1

Chapter 3

Contacting Trend MicroThis chapter discusses how to contact Trend Micro to receive help, research securitythreats, and find the latest product solutions.

Topics include:

• Contacting Technical Support on page 3-2

• Speeding Up Your Support Call on page 3-3

• Knowledge Base on page 3-3

• Security Information Site on page 3-4


3-2

Contacting Technical SupportTrend Micro provides technical support, pattern downloads, and program updates forone year to all registered users, after which you must purchase renewal maintenance. Ifyou need help or just have a question, please feel free to contact us. We also welcomeyour comments.

• Get a list of the worldwide support offices at http://esupport.trendmicro.com

• Get the latest Trend Micro product documentation at http://docs.trendmicro.com

In the United States, you can reach the Trend Micro representatives through phone, fax,or email:

Trend Micro, Inc. 10101 North De Anza Blvd., Cupertino, CA 95014 Toll free: +1 (800) 228-5651 (sales) Voice: +1 (408) 257-1500 (main) Fax: +1 (408) 257-2003 Web address: http://www.trendmicro.com Email: [email protected]

TrendLabs

Trend Micro TrendLabs℠ is a global network of antivirus research and product supportcenters providing continuous, 24 x 7 coverage to Trend Micro customers worldwide.

Staffed by a team of more than 250 engineers and skilled support personnel, theTrendLabs dedicated service centers worldwide ensure rapid response to any virusoutbreak or urgent customer support issue, anywhere in the world.

The TrendLabs modern headquarters earned ISO 9002 certification for its qualitymanagement procedures in 2000. TrendLabs is one of the first antivirus research andsupport facilities to be so accredited. Trend Micro believes that TrendLabs is the leadingservice and support team in the antivirus industry.

For more information about TrendLabs, please visit:


http://docs.trendmicro.com

http://www.trendmicro.com

mailto:%[email protected]

Contacting Trend Micro

3-3

http://us.trendmicro.com/us/about/company/trendlabs/

Speeding Up Your Support CallWhen you contact Trend Micro, to speed up your problem resolution, ensure that youhave the following details available:

• Operating System and Service Pack version

• Network type

• Computer brand, model, and any additional hardware connected to your computer

• Browser version

• Amount of memory and free hard disk space on your computer

• Detailed description of the install environment

• Exact text of any error message given

• Steps to reproduce the problem

Knowledge BaseThe Trend Micro Knowledge Base is a 24x7 online resource that contains thousands ofdo-it-yourself technical support procedures for Trend Micro products. Use theKnowledge Base, for example, if you are getting an error message and want to find outwhat to do. New solutions are added daily.

Also available in the Knowledge Base are product FAQs, important tips, preventiveantivirus advice, and regional contact information for support and sales.

The Knowledge Base can be accessed by all Trend Micro customers as well as anyoneusing an evaluation version of a product. Visit:

http://esupport.trendmicro.com/

http://us.trendmicro.com/us/about/company/trendlabs/

http://esupport.trendmicro.com/


3-4

And, if you can't find an answer to a particular question, the Knowledge Base includesan additional service that allows you to submit your question via an email message.Response time is typically 24 hours or less.

Security Information SiteComprehensive security information is available at the Trend Micro website:

http://about-threats.trendmicro.com

In the ScanMail banner at the top of any ScanMail screen, click the Help drop down,then Security Info.

Information available:

• List of viruses and malicious mobile code are currently "in the wild," or active

• Computer virus hoaxes

• Internet threat advisories

• Virus weekly report

• Virus Encyclopedia, which includes a comprehensive list of names and symptomsfor known viruses and malicious mobile code

• Glossary of terms

http://about-threats.trendmicro.com

A-1

Appendix A

GlossaryThe following is a list of terms in this document:

TERM DESCRIPTION

ActiveUpdate A Trend Micro utility that enables on-demand or backgroundupdates to the virus pattern file and scan engine, as well as theanti-spam rules database and anti-spam engine.

Configuration Selecting options for how ScanMail will function, for example,selecting whether to quarantine or delete a virus-infected emailmessage.

Default A value that pre-populates a field in the management consoleinterface. A default value represents a logical choice and isprovided for convenience. Use default values as-is, or changethem

End-User LicenseAgreement (EULA)

An End User License Agreement or EULA is a legal contractbetween a software publisher and the software user. It typicallyoutlines restrictions on the side of the user, who can refuse toenter into the agreement by not clicking I accept duringinstallation. Clicking I do not accept will end the installation of thesoftware product.

Many users inadvertently agree to the installation of spyware andother types of grayware into their computers when they click Iaccept on EULA prompts displayed during the installation ofcertain free software.


A-2

TERM DESCRIPTION

Executable file A binary file containing a program in machine language which isready to be executed (run).

Hostname The unique name composed of ASCII characters, by which acomputer is known on a network.

Hot Fixes andPatches

Workaround solutions to customer related problems or newlydiscovered security vulnerabilities that you can download from theTrend Micro website and deploy to the ScanMail server and/orclient program.

LAN (Local AreaNetwork)

A data communications network which is geographically limited,allowing easy interconnection of computers within the samebuilding.

License Authorization by law to use ScanMail for Microsoft Exchange.

MaintenanceAgreement

A Maintenance Agreement is a contract between your organizationand Trend Micro, regarding your right to receive technical supportand product updates in consideration for the payment of applicablefees.

A license to the Trend Micro software usually includes the right toproduct updates, pattern file updates, and basic technical support(“Maintenance”) for one (1) year from the date of purchase only.After the first year, Maintenance must be renewed on an annualbasis at Trend Micro’s then-current Maintenance fees.

Pattern file The pattern file, as referred to as the Official Pattern Release(OPR), is the latest compilation of patterns for identified viruses. Itis guaranteed to have passed a series of critical tests to ensurethat you get optimum protection from the latest virus threats. Thispattern file is most effective when used with the latest scan engine.

Post OfficeProtocol 3 (POP3)

POP3 is a standard protocol for storing and transporting emailmessages from a server to a client email application.

Registration key A 22-character code, including hyphens, that is used to register inthe Trend Micro customer database.

Remote accesstools

Tools used to help hackers remotely access and control acomputer.

Glossary

A-3

TERM DESCRIPTION

Standardmaintenance

See Maintenance Agreement

Traffic Data flowing between the Internet and your network, both incomingand outgoing.

TrendLabs TrendLabs is Trend Micro's global network of antivirus researchand product support centers that provide 24 x 7 coverage to TrendMicro customers around the world.

IN-1

IndexCcluster installations, 1-12contacting

technical support, 3-4

Iinstallation enhancements, 1-2installations

cluster, 1-12silent, 2-2

installation steps, 1-3installing

silent installation, 2-3installing the Service Pack, 1-3

Rremoving service pack, 1-14

Sscreens

Checking Target Server SystemRequirements, 1-8Installation Complete, 1-11Installation Progress, 1-10License Agreement, 1-4Log On, 1-8Review Settings, 1-9Select an Action, 1-5Select Target Servers, 1-6Welcome, 1-3

security information site, 3-4service pack

uninstalling, 1-14silent installations, 2-2

limitations, 2-2

performing, 2-3pre-configured files, 2-3setting parameters, 2-3

smart scan server, 1-2system requirements, 1-2

TTrendLabs, 3-2

Uuninstalling service pack, 1-14URLs

email technical support, 3-4security information site, 3-4

copyright © 2012. trend micro incorporated. all rights reserved. · 2012-12-18 · scanmail™ for...

Documents