Release Notes - McAfee Security for Microsoft Exchange 7.6.0 Software

About this document

Thank you for using McAfee^® Security for Microsoft Exchange software version 7.6. This document contains important information about this release. We strongly recommend that you read the entire document.

Caution

McAfee strongly recommends that you use any pre-release software in a test environment only. We do not support automatic upgrading of a pre-release version of the software. To upgrade to a production release of the software, you must first uninstall the existing version of the software.

Product features

New and updated features in the current release of the software are described below:

Increased protection to provide the best protection

•

McAfee Global Threat Intelligence file reputation — For cloud-based real-time malware detection. McAfee anti-virus technology with McAfee GTI technology blocks viruses and malicious code threats and offers real-time security using a combination of signature and behavior analysis with community threat intelligence. It drills down to find threats using advanced heuristics and generic detection. It even finds and blocks new viruses before they are detected with the latest .DAT signatures.

•

McAfee Global Threat Intelligence message reputation — For significantly increased spam detection through our Global Threat Intelligence based cloud offering. The additional knowledge provided by McAfee Global Threat Intelligence message reputation data enables appliances and services to more accurately filter communications and protect electronic communications and transactions between people, companies and countries.

Note	Enabling Global Threat Intelligence technologies such as file and message reputation involve a network based lookup, and might result in latencies depending on your test environment’s internet connectivity speed and bandwidth.

•

McAfee Stack Upgrade — Latest McAfee Agent/Engine for the best protection.

Product Improvements

•

Installation

◦	Install only the required components on a particular server role.
◦	Two built-in configuration profiles.

•

Product Health Alerts

Product alerts around error scenarios such as DAT/Engine download failure, Anti-Spam Rules Update failure and so on.

•

ePO Installation

Install only the required components on a particular server role.

•

Rich Notifications

Enhanced notification options such as notifying internal/external recipients and senders, HTML format support for disclaimers.

•

Silent Installation

Install only the required components on a particular server role.

•

Additional Features

◦	Forward quarantined items to administrator or any email address.
◦	View quarantined items from the Detected Items page.
◦	Regular expression support for Content scanning.
◦	Import or export blacklists and whitelists.
◦	Actual banned word or phrase in the detected items report.
◦	Allow/block the sender from detected items.
◦	Exclusion of Mailbox scanning.

•

Role based Modification

McAfee Security for Microsoft Exchange will detect the modified exchange server role and required components will be added.

•

Usability

◦	Search improvements in detected items report along with regular expression support.
◦	Graphical user interface for Anti-Spam proxy settings.
◦	Restore default built-in configuration profiles from the user interface.

•

Performance

Significant improvements in On-demand and Transport scan.

Single product support for all Exchange versions

Microsoft Exchange Server versions — 2003, 2007, and 2010

What's new in this release?

This release of McAfee Security for Microsoft Exchange 7.6 has the following new features:

•	Support for ePolicy Orchestrator4.6.
•	Support for Silent Installation.
•	Exchange Server Role based Installation and Modification.
•	Global Threat Intelligence for file and mail reputation.
•	Content filtering based on regular expressions (Regex).
•	Automated Product Health Alert notifications using ePO 4.5 or 4.6.
•	Support for Volume Mount Point.
•	Collecting fault memory dumps in case of any abnormality in the product.
•	Improved notifications with enhanced templates.
•	UI support for importing black and whitelists from a file (.csv or .txt).
•	Enhanced reporting with functionality to view and forward quarantined items.
•	Enhanced reporting displays content phrase which triggered the content scanning rule.
•	Improved handling of signed mails. Capability to remove malicious content from within a signed mail.
•	Support for HTML disclaimer.
•	Mailbox scanning exclusion.

For detailed information on these new features, refer the Product Features section.

Features not supported in this release

The following features are not supported in this release.

•	Direct upgrade from older GroupShield for Exchange versions (refer Upgrading the Software in the Installation guide).
•	Buffer Overflow Protection on a 64 bit system.

What's included with the software

McAfee Security for Microsoft Exchange 7.6 includes the following components.

•

McAfee Anti-Spam for McAfee Security for Microsoft Exchange 7.6

•

McAfee Agent 4.6

Note	McAfee Agent is a component of ePolicy Orchestrator that must be installed on each computer on the network. The agent collects and sends information between the ePolicy Orchestrator server and repositories, and manages McAfee Security for Microsoft Exchange installations across the network.

What's included in the package

The McAfee Security for Microsoft Exchange package contains the following files:

•	setup_x86.exe — Installs McAfee Security for Microsoft Exchange on a 32 bit system.
•	setup_x64.exe — Installs McAfee Security for Microsoft Exchange on a 64 bit system.
•	ASAddon_x86.exe — Installs the Anti-Spam component on a 32 bit system.
•	ASAddon_x64.exe — Installs the Anti-Spam component on a 64 bit system.
•	MSMEePOUpgrade.exe — Migrates policies from GroupShield for Exchange 7.0.X (refer Upgrading the Software in the Installation guide) to McAfee Security for Microsoft Exchange 7.6. in an upgrade using ePolicy Orchestrator.

•

Note	There will be separate installation packages for 32bit and 64 bit operating systems.

•

Readme — Contains the Readme.html file.

•

Manuals — Contains the installation guide, and product guide in PDF format.

•

ePOExtension — Contains the extension that needs to be checked in to the ePolicy Orchestrator server for managing the product using ePolicy Orchestrator.

Note	In a cluster environment, it is recommended that you execute an installation of McAfee Security for Microsoft Exchange or an upgrade to McAfee Security for Microsoft Exchange serially across the nodes.

System requirements

Before you install McAfee Security for Microsoft Exchange, ensure that your server meets these requirements:

System Requirements

Component

Requirement

Operating system

•	Microsoft Windows 2003 Standard/Enterprise Server (32-bit)
•	Microsoft Windows 2003 Standard/Enterprise Server R2 (32-bit)
•	Microsoft Windows 2003 Standard/Enterprise Server (64-bit)
•	Microsoft Windows 2003 Standard/Enterprise Server R2 (64-bit)
•	Microsoft Windows 2008 Standard/Enterprise Server SP2 (64-bit)
•	Microsoft Windows 2008 Standard/Enterprise Server R2 (64-bit)

Microsoft Exchange Server

•	Microsoft Exchange Server 2003 with Service Pack 2
•	Microsoft Exchange Server 2007 SP2
•	Microsoft Exchange Server 2007 SP3
•	Microsoft Exchange Server 2010 SP1

Browser

•	Microsoft Internet Explorer 7.0, 8.0
•	Mozilla Firefox 2.0 or later (Firefox 4.0 is not supported)

Processor

•	Intel x86 architecture-based processor (only for Exchange Server 2003)
•	Intel x64 architecture-based processor that supports Intel Extended Memory 64 technology (Intel EM64T)
•	AMD x64 architecture-based processor with AMD 64-bit technology

Memory

•	Microsoft Exchange Server 2003 — Minimum: 1 GB RAM (Recommended: 2 GB RAM)
•	Microsoft Exchange Server 2007 — Minimum: 2 GB RAM (Recommended: 4 GB RAM)
•	Microsoft Exchange Server 2010 — Minimum: 4 GB RAM (Recommended: 4 GB RAM for all individual roles and 8 GB for multiple roles)

Disk space

Minimum 740 MB

Network

10/100/1000 Mbps Ethernet card

Display

1024 x 768

McAfee ePolicy Orchestrator

Versions 4.5 or 4.6

McAfee Agent

Version 4.5 Patch3 or Version 4.6

Note	For IIS 7.0, you will need to configure IIS 6.0 in the Compatibility mode.

Components and services installed by the software

McAfee Security for Microsoft Exchange installs several components on your Exchange server.

•	McAfee Anti-Spam for McAfee Security for Microsoft Exchange — Detects spam and phishing content.
•	Access Control — Allows or denies access to the McAfee Security for Microsoft Exchange user interface for specific users or groups.
•	Product Configuration — Launches McAfee Security for Microsoft Exchange standalone version or through a web interface.
•	Sitelist Editor — Specifies the location where automatic updates (including DATs and scanning engines) are downloaded from.
•	Cluster Replication Setup — Replicates the quarantine database, policy configurations and product updates (Microsoft Exchange Server 2010 only). This is dependent upon the replication setting across a Data Availability Group (DAG), recognized by a McAfee Security for Microsoft Exchange installation.

Services available

•	McAfee Framework Service — Prerequisite for installing and using ePolicy Orchestrator. For more details on this service, refer the ePolicy Orchestrator product documentation.
•	McAfee Security for Microsoft Exchange — Protects your Microsoft Exchange Server (versions 2003, 2007, 2010) from viruses, unwanted content, potentially unwanted programs, and banned file types/messages.
•	McAfee Anti-Spam rules updater — Required to update the anti-spam rules.

Note	Existing GroupShield for Exchange 7.0.x. tasks (like update, status, config and on-demand) will not be upgraded when you upgrade to McAfee Security for Microsoft Exchange using ePolicy Orchestrator.

Installing for Microsoft Exchange Server 2003

Install McAfee Security for Microsoft Exchange on a system where Microsoft Exchange Server 2003 is installed. This method includes a wizard that leads you through the installation process with a series of instructions.

Note	During the installation process, Exchange services could stop or restart.

Task

As an administrator, log on to the system where Exchange server 2003 is installed.

Create a temporary directory on your local drive.

Download the archived software package and extract it to the temporary directory you created.

From the Setup folder, double-click setup_x86.exe (this is the setup application for a 32-bit operating system). A dialog box appears with language options for the installation.

Select a language from the drop down list, then click OK. The Welcome screen appears.

Click Next. The Preparing to Install screen prepares the installation wizard to guide you through the program setup process and extracts all the required installation files. After this process completes, the Select Exchange Server Role dialog box appears.

The three options are:

Select the required role.

•	Mailbox — Setup configures McAfee Security for Microsoft Exchange for the Mailbox role and install the relevant component - VirusScan API.
•	Gateway — Setup configures McAfee Security for Microsoft Exchange for the Gateway role and install the relevant components —Transport Scan ( Anti-Spam and Anti-VirusScan API).
•	Both — Setup configures McAfee Security for Microsoft Exchange for both Mailbox and Gateway roles and install the relevant components: On-Demand Scan and Transport Scan ( Anti-Spam and Anti-VirusScan API).

Select Enable User Junk Folder Routing to allow the scanner to route your spam emails to the client's junk folder.

Note	This is applicable only for the Mailbox role, and if you have installed the McAfee Anti-Spam Add-on on your server.

Click Next to display the Setup Type dialog box.

Select an installation type:

•

Typical — Commonly used features are installed. Buffer Overflow Protection and Anti-Spam Add-On components are not installed. You will not be protected against spam and phish emails. You can configure the product using a web browser or the standalone user interface.

Note	Buffer Overflow Protection is applicable for a 32-bit operating system and only if VirusScan Enterprise is installed. Web based Product Configuration (Web user interface) is installed in all three types of installation.

•

Complete — (Recommended) Web based Product Configuration, Buffer Overflow Protection and Anti-Spam Add-On are installed. The product is configured for maximum performance with protection against spam and phishing attacks.

•

Custom — Select which application features you want to install and where to install them. This is recommended for advanced users. If you select Custom, a dialog box displays the features you can install with an option to change the installation folder.

Click Next to display the End User License Agreement screen.

Accept the terms in the license agreement, then click Next. The Additional Configuration Settings dialog box appears.

Select Import existing configuration to import the McAfee Security for Microsoft Exchange configuration from another system. This configuration setting is saved as a .cfg file. To import this configuration, click Import, browse to the .cfg file, then click Open.

Note

This option is useful if you are installing McAfee Security for Microsoft Exchange on a new system and would like to retain the configuration from an existing installation on another system. You can also import existing configurations from versions of GroupShield for Exchange 7.0.x that are supported by McAfee Security for Microsoft Exchange. See Upgrading the software for the supported versions.

a	Under Select Quarantine mechanism, select a location to store the quarantined items, then complete the options for the location you selected.
b	If you select Local Database, click Browse to change the default location (optional). If you select McAfee Quarantine Manager, type the IP address of the Quarantine Manager server, the Port number and the Callback Port number.
c	Under Administrator Email address, type the email address to which all notifications, configuration reports, and status reports must be sent.

Enter all the required details, then click Next. The Set Protection Profile dialog box appears.

Select one of these protection profiles:

•	Default —This profile provides maximum performance with optimum protection.
•	Enhanced — This profile enables default file filter rules and provides maximum protection. It also provides real-time protection using McAfee Global Threat intelligence file and message reputation.
•	Use existing — (Upgrade only) This option uses the existing protection profile.

Click Next. The Choose Shortcuts screen appears.

Select Create Desktop shortcuts if you want the installation wizard to create shortcuts for the application on the desktop.

Click Next. The Ready to Install the Program screen displays a summary of all the selected configuration.

Verify the configuration, then click Install to proceed with the installation. The Installing progress bar displays the features being copied, initialized, and installed.

When the installation is complete, the installation wizard Completed screen appears. Select the options as required.

•	Launch product User Interface — To launch the McAfee Security for Microsoft Exchange user interface after you exit the installation wizard.
•	Show the readme file — To view the Release Notes of the product (Readme.txt) for information on any last minute additions or changes to the product, known issues or resolved issues.
•	Update DAT and Engines — (Recommended) To update McAfee Security for Microsoft Exchange with the latest DAT files, engine, and anti-spam updates.
•	Register at McAfee Business Community to stay up to date — To receive information regarding the product, new releases, updates and other relevant information.

Click Finish. When the installation wizard exits, McAfee Security for Microsoft Exchange is successfully installed on your system.

Note	We recommend that you restart your computer after the installation process is complete.

Installing for Microsoft Exchange Server 2007 and 2010

McAfee Security for Microsoft Exchange can be installed with the Edge transport role, Hub transport role, and Mailbox role.

Install McAfee Security for Microsoft Exchange on a system where Microsoft Exchange Server 2007 or 2010 is installed.

Note	McAfee Security for Microsoft Exchange will execute Transport Scanning for the Edge transport and Hub transport roles, and VirusScan API for the Mailbox role.

Task

As an administrator, log on to the system where Exchange server 2007 or 2010 is installed.

Create a temporary directory on your local drive.

Download the archived software package and extract it to the temporary directory you created.

From the Setup folder, double-click setup_x64.exe (this is the setup application for a 64-bit operating system). A dialog box appears with language options for the installation.

Select a language from the drop down list, then click OK to display the Welcome screen.

Click Next to display the Preparing to Install screen. It prepares the installation wizard which will guide you through the program setup process and extracts all the required installation files. When this process is complete, the Exchange Server Role Detection screen appears.

Note	McAfee Security for Microsoft Exchange automatically detects the roles selected during the installation of Microsoft Exchange Server 2007 or 2010.

Click Next to display the Setup Type.

Select an installation type:

•

Typical — Commonly used features are installed along with Web based Product Configuration. The Anti-Spam Add-On component is not installed.

•

Complete — (Recommended) Web based Product Configuration, Anti-Spam Add-On and Cluster Replication Setup are installed.

Note	Cluster Replication Setup is applicable only for a Microsoft Exchange Server 2010 installation.

•

Custom — Select which application features you want to install and where to install. This is recommended for advanced users. If you select Custom, a dialog box displays the features you can install. To change the destination folder for the installation files, click Change.

Note	If the Mailbox role has been installed in Microsoft Exchange Server 2007 or 2010, the service Cluster Replication Setup is installed (only for Microsoft Exchange Server 2010).

Click Next to display the End User License Agreement screen appears.

Accept the terms in the license agreement, then click Next. The Additional Configuration Settings dialog box appears.

Note

a	Under Select Quarantine mechanism, select a location to store all the quarantined items, then complete the options for the location you selected.
b	If you select Local Database, click Browse to change the default location (optional). If you select McAfee Quarantine Manager, type the IP address of the Quarantine Manager server, the Port number and the Callback Port number.
c	Under Administrator Email address, type the email address to which all notifications, configuration reports and status reports must be sent.

Enter all the required details, then click Next. The Set Protection Profile dialog box appears.

Select one of these protection profiles:

•	Default —This profile provides maximum performance with optimum protection.
•	Enhanced — This profile enables default file filter rules and provides maximum protection. It also provides real-time protection using McAfee Global Threat intelligence file and messaging reputation.
•	Use existing — (Upgrade only) This option uses the existing protection profile.

Click Next. The Choose Shortcuts screen appears.

Select Create Desktop shortcuts if you want the installation wizard to create shortcuts for the application on the desktop.

Click Next. The Ready to Install the Program screen displays a summary of all the selected configuration.

Verify the configuration, then click Install to proceed with the installation. The Installing progress bar displays the features being copied, initialized, and installed.

When the installation is complete, the installation wizard Completed screen appears. Select the options as required.

•	Launch Product User Interface — To launch the McAfee Security for Microsoft Exchange standalone user interface after you exit the installation wizard.
•	Show the readme file — To view the Release Notes of the product (Readme.txt) for information on any last minute additions or changes to the product, known issues or resolved issues.
•	Update Now — (Recommended) To update McAfee Security for Microsoft Exchange with the latest DAT files, engine, and anti-spam updates.
•	Register at McAfee Business Community to stay up to date — To receive information regarding the product, new releases, updates and other relevant information.
•	Show Windows Installer logs — To view the log file of the installation process.

Click Finish. When the installation wizard exits, McAfee Security for Microsoft Exchange is successfully installed on your system.

Note	We recommend that you restart your computer after the installation process is complete. To use the software, refer to the topic Using McAfee Security for Microsoft Exchange.

Silent Installation

Silent installation (or command-line installation) involves installing McAfee Security for Microsoft Exchange locally on a computer without the need for user intervention.

The McAfee Security for Microsoft Exchange installation is performed by the file silent.bat which is in the package MSME76EN.zip. You can set the properties by editing the silent.bat file.

For example:

•	SET ADMIN_EMAIL_ID=administrator@msme.com
•	SET AUTO_UPDATE=1
•	SET E2003_ROLE=2 [MailBox = 0, Hub = 1, Both = 2]
•	SET DB_PATH_CHANGED=1 DATABASEDIR=<New Postgres DB Locatin>

Checking in McAfee Security for Microsoft Exchange into the Master Repository

This task will guide you through the steps of checking in McAfee Security for Microsoft Exchange into the Master Repository using ePolicy Orchestrator 4.5 or 4.6.

Task

1	Log on to ePolicy Orchestrator as administrator.
2	Click Menu \| Software \| Master Repository. The Packages in Master Repository page appears.
3	Click Action \| Check In Package. The Check In Package page appears. (In ePolicy Orchestrator 4.6, you can also click the tab "Check In Package").
4	In Package type, select Product or Update (.zip). Click Browse and select the File Path for the required .zip folder, then click Next to check in the package.
5	In Package Options, select Branch as Current, then click Save.

Checking in the extension

Use this task to check in the extensions for McAfee Security for Microsoft Exchange.

Task

1	Log on to the ePolicy Orchestrator server as an administrator.
2	Click Menu \| Software \| Extensions. The Extensions page appears.
3	Click Install Extension to install the McAfee Security for Microsoft Exchange policy extension. The Install Extension dialog box appears.
4	Click Browse, select the extension file MSME____7600_0409 .ZIP for English (corresponding extension files for available languages), then click OK.
5	To install Report extensions, select the extension file MSME76REPORTS.ZIP, and repeat steps 2 - 4.

Deploying the software using ePolicy Orchestrator 4.5

This section provides information on how to deploy McAfee Security for Microsoft Exchange using ePolicy Orchestrator 4.5.

Task

Log on to the ePolicy Orchestrator server as an administrator.

Click Menu | Systems | System Tree. The My Organization page appears. Select a required group or system(s).

In the Client Tasks tab, click Actions and select New Task, or click the tab New Task. The Client Task Builder page appears.

Under the tab Description, type a Name for the new task.

Type content for Notes if required.

In Type, select Product Deployment from the drop-down list.

In Tags, select an option to send this task to all computers or only to computers matching certain criteria, then click Next to display the Configuration page.

Select the required operating system in Target Platforms.

In Products and components, select McAfee Security for Microsoft Exchange version 7.6 as the product and select the Action as Install. Select the required Language and Branch.

In Options, select Run at every policy enforcement if required.

Note	This is applicable for Windows platform only.

Click Next to display the Schedule page.

In the Schedule page, select the options and define the corresponding parameters as required for this task. In Schedule type, select Run immediately, then click Next. The Summary page displays the list of defined parameters for this task.

Click Save to add the client task.

Note	Use the following command line options to have a customized installation of McAfee Security for Microsoft Exchange. To separate multiple parameters, use a space. These command line options are applicable for ePolicy Orchestrator 4.6 also.

Command line arguments for the installer

Parameter	Example	Description
INSTALL_DIR	INSTALL_DIR="C:\MSME"	Installs McAfee Security for Microsoft Exchange in the specified folder location.
DATABASEDIR	DATABASEDIR="C:\MSME\DATA"	Installs McAfee Security for Microsoft Exchange database in the specified folder location.
ADMIN_EMAIL_ID	ADMIN_EMAIL_ID="Administrator@example.org"	Defines the administrator email address which will receive all notifications.
AUTO_UPDATE	AUTO_UPDATE=1	This will run an autoupdate at the end of an installation. The default value is "1". If you do not want to run this autoupdate, set the value to "0".
NEED_DESKTOP_SHORTCUT	NEED_DESKTOP_SHORTCUT=1	This will create shortcuts on the desktop. The default value is "1". Set the value to "0" if you do not want to create desktop shortcuts.
DB_PATH_CHANGED	DB_PATH_CHANGED=1	Default value is set to '0'. To change the database path, first set this parameter="1", then change the database path using the command line DATABASEDIR.
DOMAINNAME	DOMAINNAME=mydomain.com	Use these three parameters to deploy from ePolicy Orchestrator only on a Microsoft Exchange Server 2010 setup and only to create an On-Demand user with domain administrator privileges.
USERNAME	USERNAME=administrator
PASSWORD	PASSWORD=Password123

Note	In a Microsoft Exchange 2003 environment, you can set the parameter E2003_ROLE to execute a customized installation according to the Exchange role.

•	For Mailbox role, set the value to "0".
•	For Gateway role, set the value to "1".
•	For both these roles, set the value to "2". This is the default value.

Deploying the software using ePolicy Orchestrator 4.6

This section provides information on how to deploy McAfee Security for Microsoft Exchange using ePolicy Orchestrator 4.6.

Task

1	Log on to the ePolicy Orchestrator server as an administrator.
2	Click Menu \| Systems \| System Tree. The My Organization page appears. Select a required group or system(s).
3	In the Assigned Client Tasks tab, click Actions and select New Client Task Assignment. The Client Task Assignment Builder page appears displaying existing tasks which can be scheduled.
4	Select a Product, Task Type, then click Create New Task.
5	Type a task name, enter a description if required, select the options and define the corresponding parameters as required for this task, then click Save. The new task is displayed in the column Task Name. Select other parameters as required, then click Next to display the Schedule Page.
6	In the Schedule page, select the options and define the corresponding parameters as required for this task. In Schedule type, select Run Immediately, then click Next. The Summary page displays the list of defined parameters for this task.
7	Click Save to add the client task.

Testing your McAfee Security for Microsoft Exchange installation

When you have completed installation of McAfee Security for Microsoft Exchange, we recommend that you test the installation to ensure that the software is installed properly and can detect viruses and spam within the email messages.

The recommended method to test an anti-virus product is to attach an EICAR anti-virus test file to an email message, and to send the message through the Exchange server where you’ve just installed McAfee Security for Microsoft Exchange.

The EICAR standard anti-virus test file was created jointly by several anti-virus vendors throughout the world to implement a standard by which customers can verify their anti-virus installations.

Note	This file is not a virus. Ensure that you delete the file when you have finished testing your installation to avoid alarming unsuspecting users.

To test your installation:

Task

Copy the following line into its own file, making sure you do not include any spaces or line breaks. Save the file with the name EICAR.COM.

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

The file size will be 68 bytes.

Make sure McAfee Security for Microsoft Exchange service is up and running. Send a mail using your mail client with Eicar.Com as an attachment. Check the mail in the recipient’s mailbox. The mail will contain a file warning.txt attached which replaces the sample virus file Eicar.Com. This action is as per the default settings of the product.

McAfee Security for Microsoft Exchange replaces the EICAR test file with an alert message.

Important

Please note that this file Eicar.Com is NOT A VIRUS. For more information on the EICAR test file, visit: http://www.eicar.org

Testing the anti-spam component

You can test the operation of the software by running the GTUBE (General Test mail for Unsolicited Bulk Email) test.

The test email message must be sent from an external email account (a different domain).

Task

Create a new email message.

In the body of the message, copy the following text:

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

Ensure that you copy this with no extra spaces or line breaks.

From an external email address, send the new email message to a mailbox address on the server where you have installed the McAfee Security for Microsoft Exchange with McAfee Anti-Spam Add-On component. McAfee Anti-Spam scans the message, recognizes it as a junk email message, and takes action (as specified in the configuration settings).

Note	The GTUBE test overrides blacklists and whitelists. For more information on the GTUBE test file, visit http://spamassassin.apache.org/.

Testing the anti-virus component

The EICAR standard anti-virus test file was created jointly by several anti-virus vendors throughout the world to implement a standard by which customers can verify their anti-virus installations.

Note	This file is not a virus. Ensure that you delete the file when you have finished testing your installation to avoid alarming unsuspecting users.

Task

1	Copy the following line into its own file, then save the file with the name EICAR.COM: X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* The file size will be 68 or 70 bytes.
2	Send an email message through the Exchange server with the EICAR test file as an attachment. When McAfee Security for Microsoft Exchange examines the email message, it reports finding the EICAR test file, but is unable to clean or repair the EICAR file because it is a test file.
3	McAfee Security for Microsoft Exchange replaces the EICAR test file with an alert message.

Testing McAfee Security Service for Exchange using McAfee Virtual Technician

You can test if McAfee Security for Microsoft Exchange is installed correctly by running McAfee ^® Virtual Technician (MVT).

McAfee ^® Virtual Technician automatically checks for common deviations that may have occurred since the time you installed the product.

To download McAfee ^® Virtual Technician, visit: http://mvt.mcafee.com/mvt/index.asp.

Upgrading a standalone product

McAfee Security for Microsoft Exchange version 7.6 supports upgrading your configuration settings from the previous version of the product. When upgrading to a new version of McAfee Security for Microsoft Exchange, you do not need to uninstall the existing version.

The installation program updates your installation to the new version. This method includes a wizard that leads you through the installation process with a series of instructions for upgrading your software.

Note	During the installation process, Exchange services could stop or restart. This includes all services related to Exchange Database and Exchange Transport.

Use this task to upgrade from earlier versions of GroupShield for Exchange to McAfee Security for Microsoft Exchange version 7.6.

Task

Follow steps 1 - 4 in the section Installing for Microsoft Exchange Server 2003 or Installing for Microsoft Exchange Server 2007 and 2010.

Note	When upgrading, the dialog box for language options is not displayed.

The Preparing to Install screen prepares the installation wizard to guide you through the program upgrade process and extracts all the required installation files. After this process completes, the Select Exchange Server Role dialog box appears.

Note	In the case of Exchange Server 2007 and 2010, the Exchange Server Role Detection screen appears.

Follow steps 7 - 9 in the section Installing for Microsoft Exchange Server 2003 or Installing for Microsoft Exchange Server 2007 and 2010.

Click Next. The Custom Setup dialog box is displayed reflecting all the features installed in the existing installation of GroupShield for Exchange.

Select the features you want to be updated with McAfee Security for Microsoft Exchange, then click Next to display the End User License Agreement screen.

Accept the terms in the license agreement, then click Next. The Additional Configuration Settings dialog box appears.

This screen displays the settings for quarantine mechanism and quarantine database applied in GroupShield for Exchange. Change the settings if required, then click Next. The Set Protection Profile dialog box appears. The option Use Existing is selected by default.

Click Next. The Choose Shortcuts screen appears.

Select Create Desktop shortcuts if you want the installation wizard to create shortcuts for the application on the desktop.

Click Next. The Ready to Install the Program screen displays a summary of all the selected configuration.

Verify the configuration, then click Install to proceed with the upgrade. The Installing progress bar displays the features being copied, initialized, and installed. When the installation is complete, the installation wizard Completed screen appears. The option Migrate Quarantine Data is selected by default.

Click Finish. When the installation wizard exits, GroupShield for Exchange is successfully upgraded to McAfee Security for Microsoft Exchange version 7.6. on your system.

Note

To migrate policies from GroupShield for Exchange 7.0.x to McAfee Security for Microsoft Exchange 7.6, select the option "Import existing configuration" during installation, then provide the path of the CFG file of GroupShield for Exchange. We recommend that you restart your computer after the installation process is complete.

Upgrading McAfee Security for Microsoft Exchange using ePolicy Orchestrator 4.5

This task will guide you through the process of upgrading your installation of McAfee Security for Microsoft Exchange through ePolicy Orchestrator 4.5.

Before you begin

See Upgrading the Software for supported versions. Close all instances of GroupShield for Exchange before starting the upgrade.

Close all instances of McAfee Security for Microsoft Exchange before starting the upgrade.

Task

1	Log on to ePolicy Orchestrator as administrator.
2	Check in the package. See Checking in a package for the procedure.
3	Click Menu \| Systems \| System Tree. The "My organization" page appears.
4	Click Systems to display the systems in a particular group or all groups. Select the required group, groups or system, then click Client Tasks.
5	Click New Task to display the Client Task Builder page. Enter details for Name and Notes.
6	In type select Product Deployment, in Tags select the required option, then click Next. The Configuration page appears.
7	In Configuration, select the required options for what the task should do, then click Next. The Schedule page appears.
8	Select the required options to schedule the update task , then click Next. The Summary page appears, displaying the parameters for the task.
9	Click Save. Then click System tree \| Systems.
10	Select the required group, groups or system, then click Wake Up Agents. The Wake Up McAfee Agent page appears.
11	Select the required parameters and click OK to send the wake-up call to the selected systems to upgrade the software.

Upgrading McAfee Security for Microsoft Exchange using ePolicy Orchestrator 4.6

This task will guide you through the process of upgrading your installation of McAfee Security for Microsoft Exchange through ePolicy Orchestrator 4.6.

Before you begin

See Upgrading the Software for supported versions. Close all instances of GroupShield for Exchange before starting the upgrade.

Task

1	Log on to ePolicy Orchestrator as administrator.
2	Check in the package. See Checking in a package for the procedure.
3	Click Menu \| Systems \| System Tree. The "My organization" page appears.
4	Click Systems to display the systems in a particular group or all groups. Select the required group, groups or system, then click Assigned Client Tasks.
5	Click Actions \| New Client Task Assignment. The Client Task Assignment Builder page appears.
6	In Task Type, select Product Deployment. Select the required option in Lock task inheritance and Tags, then click the link Create New Task.
7	Enter details for Task Name and Description. Select the required options, then click Save.
8	Click System Tree \| Systems. Select the required group, groups or system, then click Wake Up Agents. The Wake Up McAfee Agent page appears. Select the required parameters, then click OK to send the wake-up call to the selected systems to upgrade the software.

Known issues

Known issues in this release of the software are described below:

Known Issues

Reference ID	Issue	Workaround
Installation/Upgrade
687305	After upgrading to McAfee Security for Microsoft Exchange 7.6., the Microsoft Exchange database instance (cluster resource) stops. This is observed only on exchange clusters hosted by Windows 2008.	Start the Microsoft Exchange database instance (cluster resource) after upgrading to McAfee Security for Microsoft Exchange 7.6.
593689	After installing McAfee Security for Microsoft Exchange, Postgress error is logged only once in the Windows event log, where the following error message is displayed: 'FATAL: the database system is starting up'.	This error can be ignored since the database is coming up. In case if this error is observed again, refer KB article 71971.
661083	The repair option in the McAfee Security for Microsoft Exchange installer does not repair the corrupted config.	McAfee recommends that you do not execute the Repair function for a corrupted McAfeeconfig.xml file. You need to manually copy the McAfeeconfig.xml file from the default config location. On changing the Default config, the Database path will also be changed to the default path and if you need to point back to the existing Database, you have to change it from the Detected Items page. After this you need to restart the McAfee Security for Microsoft Exchange service.
680859	The Autoupdate option provided during product deployment from ePolicy Orchestrator does not run the auto update task.	Successive auto update works.
689137	GroupShield for Exchange deployment task gets executed on the client machine if the GroupShield for Exchange deployment package coexists with the McAfee Security for Microsoft Exchange deployment package in the ePolicy Orchestrator repository.	Remove the GroupShield for Exchange deployment task on the ePolicy Orchestrator server.
688568	If you modify and add components on the passive node of a Microsoft Exchange 2003 Active or Passive cluster, McAfee Anti-spam rules update service and McAfee Security for Microsoft Exchange service are changed from Manual to automatic and are in the Started state.	Stop the services and make the services manual using the Service Control Manager.
689900	During an upgrade, the DAT folder fails to copy when the GroupShield for Exchange resource is pointing to a mount-point.	Create the GroupShield for Exchange resource on a shared drive instead of a mount-point.
On Access
633348	Spam mails are not being routed to the user's junk folder intermittently on a Microsoft Exchange 2003 machine.	If this is observed, refer KB articles 69111, 68116, and 52351.
680489	If you activate the anti-spam (MSMEasa.exe) component after expiry of evaluation period, spam and phish mails are not scanned.	Restart Microsoft Exchange Transport service on Microsoft Exchange 2007 and 2010. On Microsoft Exchange 2003, restart IIS.
Notification
679520	After upgrading to McAfee Security for Microsoft Exchange, the Notifications template for internal sender and recipient still shows ‘GroupShield for Exchange ' instead of ‘McAfee Security for Microsoft Exchange '.	Edit the Notification template as required.
Miscellaneous
539872	The warning message in an email body displays garbage, but when you open the warning message in an attachment, the warning message is displayed correctly.	Set the encoding for plain text alert as UTF-8 in the configuration and when alerts are received, the end user should change the outlook encoding to UTF-8 to view the alert properly. This is only the case when VSAPI scanning is done on localized languages.
680826	IE does not display the correct content when ‘View items’ is selected under’ Detected items’. Mail items having localized characters are not displayed correctly when the View option is selected for any item to be viewed in IE.	The same item can be viewed correctly with Firefox.
687287	After installing McAfee Security for Microsoft Exchange or after upgrading to McAfee Security for Microsoft Exchange, unable to open the Sitelist Editor.	Run the McAfee Agent Status monitor on the client machine.
689752	After an upgrade to McAfee Security for Microsoft Exchange, both GroupShield for Exchange and McAfee Security for Microsoft Exchange are visible in Connected Point Products on the McAfee Quarantine Manager dashboard. McAfee Quarantine Manager keeps trying to push the config to GroupShield for Exchange and fails to push it to McAfee Security for Microsoft Exchange.	Restart the McAfee Quarantine Manager Service.

Finding product documentation

McAfee provides the information you need during each phase of product implementation, from installing to using and troubleshooting.

After a product is released, information about the product is entered into the McAfee online KnowledgeBase.

Task

Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com.

Under Self Service, access the type of information you need:

Self Service information

For user documentation

For the KnowledgeBase

1	Click Product Documentation.
2	Select a Product, then select a Version.
3	Select a product document.

1	Click Search the KnowledgeBase for answers to your product questions.
2	Click Browse the KnowledgeBase for articles listed by product and version.

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

TRADEMARK ATTRIBUTIONS

AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property of their respective owners.

LICENSE INFORMATION

License Agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.