ÂíÇ ãíÏÇäíÏ ßå ØæÑ ãíÔæÏ
Release Notes for McAfee VirusScan Enterprise
Version 7.0.0
(c) 2003 Networks Associates Technology, Inc.
All Rights Reserved
- DAT Version: 4249
- Engine Version: 4.2.40
===============================================
Thank you for using VirusScan Enterprise 7.0
software. This file contains important
information regarding this release. We strongly
recommend that you read the entire document.
_______________________________________________
WHAT'S IN THIS FILE
- New Features
- System Requirements & Installation
- Testing Your Installation
- Known Issues
- Documentation
- Contacting McAfee and Network Associates
- Copyright and Trademark Attributions
- Trademarks
- License Agreement
_______________________________________________
NEW FEATURES
This section contains a brief summary of the
key new and changed features for VirusScan
Enterprise 7.0. For a complete list of new and
changed product features, see the VirusScan
Enterprise 7.0 Release Guide. The Release Guide
is available for download from the McAfee web
site.
- File server and desktop configurations are
now served by one product. VirusScan
Enterprise 7.0 combines the VirusScan and
NetShield products into one solution that
can be installed on both servers and
desktops.
- Support for Microsoft Windows Server 2003
operating systems, formerly known as Windows
.NET Server.
- Update Improvements:
- McAfee AutoUpdate Architect 1.0 utility
for customizing update repositories.
- AutoUpdate for full DAT files,
incremental DATs, EXTRA.DATs, engines,
Service Packs, and HotFixes.
- Mirrored updating for both desktops and
servers using AutoUpdate Mirror tasks.
- Updating via HTTP, FTP (passive or
active), UNC share, local drive, or
mapped drive.
- Resumable updating after transfer
interruption when updating from HTTP, UNC
share, or local or mapped drive.
- "Update Now" single-click updating.
- Scanning Improvements:
- Faster scanning performance.
- Resumable on-demand scanning allows you
to better control when and how often
scans run.
- Scan options for High-Risk and Low-Risk
programs.
- Support for Fast User Switching on Windows
XP.
- Improved ability to make changes to
configurations after deployment using McAfee
Installation Designer 7.0.
- Ability for an administrator to limit the
user interface visible to an end user.
- English language version runs on localized
operating systems.
___________________________________________
SYSTEM REQUIREMENTS & INSTALLATION
See the VirusScan Enterprise 7.0 Installation
Guide for details on installing the product.
The Installation Guide is available for
download from the McAfee web site or product
CD.
INSTALLING LOCALIZED VERSIONS
VirusScan Enterprise 7.0 is available in
several languages. Note that each
foreign-language version of VirusScan
Enterprise can only be installed on an
operating system of the same language. For
example, you can only install the French
version of VirusScan Enterprise 7.0 on a French
version of Windows. However, the English
language version of VirusScan Enterprise 7.0
can be installed on any supported operating
system in any language.
VIRUSSCAN ENTERPRISE 7.0 AND ALERT MANAGER
VirusScan Enterprise 7.0 can only send alerts
to Alert Manager 4.7. It cannot send alerts to
older versions of Alert Manager.
Furthermore, VirusScan Enterprise 7.0 cannot be
installed on a computer where old versions of
Alert Manager, versions 4.5 or 4.6, are already
installed. If you are installing VirusScan
Enterprise 7.0 onto a system where Alert
Manager 4.5 or 4.6 is installed, you should
also install Alert Manager 4.7, which
automatically replaces the older version of
Alert Manager.
However, also note that Alert Manager 4.7 can
receive alerts from older versions of NetShield
and VirusScan. You can configure older versions
of these software programs to send alerts to an
installation of Alert Manager 4.7.
VIRUSSCAN ENTERPRISE 7.0 AND SUPERDAT MANAGER
VirusScan Enterprise 7.0 does not support
updates using SuperDAT Manager version 1.4 or
earlier. To create SuperDAT packages for
VirusScan Enterprise 7.0, only use the new
SuperDAT Manager version 1.5.
VIRUSSCAN ENTERPRISE 7.0 AND WEBSCANX
Previous versions of VirusScan contained three
extra scan components that together were known
as WebScan X: E-mail Scan, Download Scan, and
Internet Filter. These components augmented the
scan capabilities provided by VirusScan’s core
On-Access and On-Demand scanners.
VirusScan Enterprise 7.0 retains the E-mail
scanning portion of WebScan X, but no longer
includes the Download Scanner or the Internet
Filter. The protection provided by Download
Scanner or the Internet Filter has been
incorporated into other components of the
VirusScan Enterprise 7.0 product. This allows
us to provide the same level of protection but
with a much smaller footprint and fewer
components to manage.
TESTING YOUR INSTALLATION
You can test the operation of the software by
running the EICAR Standard AntiVirus Test File
on any computer where you have installed the
software. The EICAR Standard AntiVirus Test
File is a combined effort by anti-virus vendors
throughout the world to implement one standard
by which customers can verify their anti-virus
installations.
To test your installation:
1. Copy the following line into its own file,
then save the file with the name EICAR.COM.
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
The file size will be 68 or 70 bytes.
2. Start your anti-virus software and allow it
to scan the directory that contains
EICAR.COM.
When VirusScan Enterprise 7.0 scans this
file, it will report finding the EICAR test
file.
3. Delete the file when you have finished
testing your installation to avoid alarming
unsuspecting users.
IMPORTANT:
Please note that this file is NOT A VIRUS.
_______________________________________________
KNOWN ISSUES
MOST IMPORTANT KNOWN ISSUE
1. Updating from a mapped drive only works if
you are logged on when the update occurs and
you have at least read rights to that mapped
drive location. If no one is logged on to
the system, or if you are logged on but do
not have at least read rights to the mapped
location, the update fails.
ePOLICY ORCHESTRATOR COMPATABILITY ISSUES
1. If you use ePolicy Orchestrator 2.5.1 to
force installation of VirusScan 4.5.1 and
VirusScan Enterprise 7.0, ePolicy
Orchestrator installs both products on the
client computer. Normally in this situation,
ePolicy Orchestrator should only install the
more recent version, VirusScan Enterprise
7.0.
2. When using ePolicy Orchestrator 2.5.1 to
force installation of NetShield 4.5 for
Windows NT on a client system where
VirusScan Enterprise 7.0 is already
installed, ePolicy Orchestrator installs
NetShield. Normally in this situation,
ePolicy Orchestrator should recognize that a
newer version, VirusScan Enterprise 7.0,
already exists on the client system and not
install the older version, NetShield 4.5.
3. When you are adding the McAfee AutoUpdate
7.0 policy to the software repository in
ePolicy Orchestrator 2.5.1 and you are
prompted to enable software deployment,
select "No."
If you select "Yes" the following errors may
appear:
- "Error downloading policy translation
file for VIRUSSCAN7000. Do you want to
continue?"
- "Error downloading HTTP:\\...\POLICY.TPL.
Do you want to continue?"
Note that if you do select "Yes" and see
these errors, they are harmless and can be
ignored. After clicking "Yes" to both, you
should see a confirmation message that the
policy was added successfully.
4. Resumable scanning does not work for
on-demand scan tasks created and deployed
using ePolicy Orchestrator 2.5.1 or the beta
version of ePolicy Orchestrator 3.0. This
occurs if the on-demand scan created in
ePolicy Orchestrator ends before the scan
completes (due to a time-out, system
shut-down, etc). When the on-demand scan
task starts again, it begins scanning again
at the beginning, rather than resume from
the last file scanned.
INSTALLING AND UPGRADING
1. Some install functionality is not present
when you install using MSIEXEC.EXE. In
particular, SETUP.EXE must be used to
perform an upgrade or over-install of any
McAfee or competitor’s anti-virus product.
If you do use MSIEXEC.EXE to install
VirusScan, you must first remove any
existing anti-virus products.
2. This release supports deployment using
Administration Installation Points (AIP).
However, you must run SETUP.EXE from the AIP
to perform upgrades or to uninstall other
anti-virus software. Note that if you
deploy VirusScan Enterprise via Active
Directory group policies, which installs
using MSIEXEC.EXE, you must remove any
existing anti-virus product prior to
installing VirusScan Enterprise.
UPDATING WITH AUTOUPDATE 7.0
The "Known Issues" in this section pertain to
updating using the new McAfee AutoUpdate 7.0
component.
1. When editing the repository list to use a
UNC path, the "Edit AutoUpdate Repository
List" dialog box does not validate that the
path entered is in fact a valid UNC share
before accepting. Be sure that you enter a
valid UNC server, share, and path name.
Entering an invalid UNC path could cause
problems with updating from this location.
2. If updating an EXTRA.DAT file manually, for
example by copying it to the engine folder,
you must restart the VirusScan Enterprise
E-mail, On-Demand, and On-Access scanners
before they can detect and use the new
EXTRA.DAT file.
- For E-mail Scan, close and then restart
Microsoft Outlook.
- For the On-Demand Scan, stop and re-start
the on-demand scanner using the VirusScan
Enterprise Console.
- For On-Access Scan, disable and then
re-enable the On-Access scanner using the
VirusScan Enterprise Console.
NOTE:
Updating EXTRA.DATs using AutoUpdate does
not require manually restarting
scanners.
3. The AutoUpdate 7.0 component does not remove
the update packages from the local update
repository that was created during the
update process when the update is not
applied successfully.
NOTE:
If you are using ePolicy Orchestrator to
deploy VirusScan Enterprise, the deployment
package files (setup.exe and other
supporting files) are intentionally left on
the client computer after the product
installation, regardless of whether the
installation succeeds or fails.
4. When a user with user rights (as opposed to
an administrator with administrative rights)
rolls back DAT files, the following error
occurs:
"Failed to save the version of the DATs
that have just been rolled back"
This means that VirusScan Enterprise failed
to create the correct registry key
identifying that the rollback has occurred.
Because of this, performing an update can
allow the rolled-back DATs to be reapplied.
This can cause problems if the rolled-back
DAT versions were indeed corrupted (usually
the reason for performing a DAT rollback).
Normally, VirusScan Enterprise does not
allow updating of DAT versions that have
been rolled back.
NOTE:
This problem only occurs when a
non-administrator performs the DAT rollback.
When administrators do it, the rolled-back
DAT versions cannot be applied through
updating.
5. If you are using content scanning and
filtering software on your network, you may
experience some problems with updating. This
can occur if your content filtering software
modifies a McAfee update package.
SCAN ISSUES
1. VirusScan Enterprise 7.0 is set by default
to scan "All files" to ensure the best
anti-virus protection. Previous versions of
VirusScan and NetShield were set by default
to scan "Default" files only. For a
comparable level of protection and
performance compared to past versions,
configure VirusScan Enterprise 7.0 to scan
only "Default + additional file types".
Note, however, that because of other
performance enhancements to this version of
the software, leaving scan options set to
"All files" may not cause any noticeable
performance slow-down compared to older
versions.
_______________________________________________
DOCUMENTATION
This product includes a documentation set that
consists of manuals saved in Adobe Acrobat
Portable Document Format (.PDF) and an online
Help system.
Electronic copies of all product manuals are
included on the product CD, or are available
with the Network Associates
PrimeSupport KnowledgeCenter Service Portal:
https://mysupport.nai.com/login.asp
A free copy of the latest version of Acrobat
Reader comes with the product CD, or you can
download any version from the Adobe web site:
www.adobe.com/prodindex/acrobat/readstep.html
This product includes the following
documentation set:
1. VirusScan Enterprise 7.0 Installation Guide.
This guide provides system requirements,
instructions for installing the software and
information on where to find the product
documentation. A printed version of this
guide accompanies the product CD. You can
also access an online version of the manual
from the product CD or from the McAfee
download site. The online version is an
Adobe Acrobat .PDF file.
2. VirusScan Enterprise 7.0 Product Guide. This
guide introduces the product, documents
product features, provides detailed
instructions for configuring the software,
and includes information on deployment as
well as recurring tasks and operating
procedures. It also provides a roadmap for
getting additional information or help. An
Adobe Acrobat .PDF version of this guide is
stored on the product CD. You can also
download a copy in .PDF format from the
McAfee download site.
3. VirusScan Enterprise 7.0 Release Guide. This
is a document that describes new, changed,
or lost features from the previous releases
of the VirusScan and NetShield products. An
Adobe Acrobat .PDF version of this guide is
available for download in .PDF format from
the McAfee download site.
4. Online Help system. Online Help, accessed
from within the software application, gives
you quick access to hints and tips about
using your software. Help includes
field-level What's This? Topics and
page-level context Help with links to more
detailed and related information. Help also
includes an overview of product features and
step-by-step procedures for product
features.
5. McAfee AutoUpdate Architect Product Guide.
This guide introduces McAfee AutoUpdate
Architect 1.0, the new management utility
for maintaining your updating environment
for VirusScan Enterprise 7.0. The Product
Guide includes information for configuring
VirusScan Enterprise update repositories
using McAfee AutoUpdate Architect 1.0.
NOTE:
McAfee AutoUpdate Architect 1.0 is not
required for VirusScan Enterprise 7.0
updating to work. Rather, it is a utility
for managing and customizing your
environment of update repositories.
6. VirusScan Enterprise Configuration Guide for
ePolicy Orchestrator 2.X. This guide is for
users of ePolicy Orchestrator version 2.5,
or 2.5.1 with VirusScan Enterprise 7.0.
7. Updating with VirusScan Enterprise
Implementation Guide. This guide provides an
overview of the VirusScan Enterprise
updating process and the tools available for
performing this task in mixed environments.
8. A LICENSE Agreement. This outlines the terms
under which you may use the product. Read it
carefully. If you install the product, you
agree to the license terms.
9. This README file.
10. A CONTACT file. This file provides a list
of phone numbers, street addresses, web
addresses, and fax numbers for Network
Associates offices in the United States and
around the world. It also includes contact
information for services, such as technical
support, customer service, onsite training,
and AVERT Anti-Virus Research Site.
_______________________________________________
CONTACTING MCAFEE AND NETWORK ASSOCIATES
Technical Support
http://knowledge.nai.com
AVERT Anti-Virus Emergency Response Team
www.mcafeeb2b.com/naicommon/avert/default.asp
Download Site
www.mcafeeb2b.com/naicommon/download/
ftp://ftp.nai.com/pub/antivirus/datfiles/4.x
DAT File Updates
ftp://ftp.nai.com/commonupdater
http://download.nai.com/products/commonupdate
Product Upgrades
www.mcafeeb2b.com/naicommon/download/upgrade/login.asp
Valid grant number required.
Contact Network Associates Customer
Service
On-Site Training Information
www.mcafeeb2b.com/services/mcafee-training/default.asp
Network Associates Customer Service
US, Canada, and Latin America toll-free:
Phone: +1-888-VIRUS NO or +1-888-847-8766
Monday - Friday, 8 a.m. - 8 p.m.,
Central Time
E-mail: services_corporate_division@nai.com
Web: www.nai.com
www.mcafeeb2b.com
For additional information on contacting
Network Associates and McAfee – including
toll-free numbers for other geographic areas --
see the CONTACT file that accompanied your
original product release.
_______________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS
(c) 2003 Networks Associates Technology, Inc.
All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form or by
any means without the written permission of
Networks Associates Technology, Inc., or its
suppliers or affiliate companies. To obtain
this permission, write to the attention of the
Network Associates legal department at: 3965
Freedom Circle, Santa Clara, California 95054,
or call +1-972-308-9960.
TRADEMARKS
Active Firewall, Active Security, Active
Security (in Katakana), ActiveHelp,
ActiveShield, AntiVirus Anyware and design,
Bomb Shelter, Certified Network Expert,
Clean-Up, CleanUp Wizard, CNX, CNX
Certification Certified Network Expert and
design, Design (stylized N), Disk Minder,
Distributed Sniffer System, Distributed Sniffer
System (in Katakana), Dr Solomon’s, Dr
Solomon’s label, Enterprise SecureCast,
Enterprise SecureCast (in Katakana), Event
Orchestrator, EZ SetUp, First Aid, ForceField,
GMT, GroupShield, GroupShield (in Katakana),
Guard Dog, HelpDesk, HomeGuard, Hunter,
LANGuru, LANGuru (in Katakana), M and design,
Magic Solutions, Magic Solutions (in Katakana),
Magic University, MagicSpy, MagicTree, McAfee,
McAfee (in Katakana), McAfee and design,
McAfee.com, MultiMedia Cloaking, Net Tools, Net
Tools (in Katakana), NetCrypto, NetScan,
NetShield, NetStalker, Network Associates,
NetXray, NotesGuard, Nuts & Bolts, Oil Change,
PC Medic, PCNotary, PrimeSupport, Recoverkey,
Recoverkey - International, Registry Wizard,
ReportMagic, Router PM, Safe & Sound,
SalesMagic, SecureCast, Service Level Manager,
ServiceMagic, SmartDesk, Sniffer, Sniffer (in
Hangul), Stalker, SupportMagic, TIS, TMEG,
Total Network Security, Total Network
Visibility, Total Network Visibility (in
Katakana), Total Service Desk, Total Virus
Defense, Trusted Mail, UnInstaller, Virex,
Virus Forum, ViruScan, VirusScan, WebScan,
WebShield, WebShield (in Katakana), WebSniffer,
WebStalker, WebWall, Who’s Watching Your
Network, WinGauge, Your E-Business Defender,
ZAC 2000, Zip Manager are registered trademarks
of Network Associates, Inc. and/or its
affiliates in the US and/or other countries.
All other registered and unregistered
trademarks in this document are the sole
property of their respective owners.
This product includes or may include software
developed by the OpenSSL Project for use in the
OpenSSL Toolkit. (http://www.openssl.org/)
This product includes or may include
cryptographic software written by Eric Young.
(eay@cryptsoft.com)
LICENSE AGREEMENT
NOTICE TO ALL USERS: CAREFULLY READ THE
APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO
THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE
GENERAL TERMS AND CONDITIONS FOR THE USE OF THE
LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH
TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE
CONSULT THE SALES AND OTHER RELATED LICENSE
GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU
HAVE RECEIVED SEPARATELY AS PART OF THE
PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT
CD, OR A FILE AVAILABLE ON THE WEB SITE FROM
WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF
YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH
IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE.
IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO
NETWORK ASSOCIATES, INC. OR THE PLACE OF
PURCHASE FOR A FULL REFUND.