Released: Critical Fix 1 for Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 (Build 6.0.1512.1514)

DESCRIPTION

Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 Critical Fix 1 (hereinafter referred to as Kaspersky Security or the "application") is designed for anti-virus protection of mailboxes and public folders located on Microsoft Exchange Server 2007 and e-mail relayed through Hub Transport or Edge Transport.

1. Differences between Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 Critical Fix 1 and Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1:
• Critical error in the statistics collection and report generation subsystem fixed.
2. Differences between Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 and Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Critical Fix 1:
• Support of application operation on a cluster of servers added.
• Optimization of application performance by cancelling the scan of messages scanned on the transport level added.
• A new statistics collection and report generation subsystem with improved performance and extended functionality implemented.
• Errors in implementation of several components and application subsystems fixed.
3. Differences between Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Critical Fix 1 and Kaspersky Security 6.0 for Microsoft Exchange Server 2007:
• Support of application installation on Microsoft Windows Server 2008 added.
• Errors in the statistics collection and report generation subsystem fixed.
• Errors in the update subsystem fixed.

ATTENTION! Application Setup

Hardware requirements:

• Intel Pentium 300 MHz or faster CPU;
• 256 MB of available RAM;
• 100 MB of available disk space for application setup.

Software requirements:

1. One of the following operating systems:
• Microsoft Small Business Server 2008 Standard;
• Microsoft Small Business Server 2008 Premium;
• Microsoft Essential Business Server 2008 Standard;
• Microsoft Essential Business Server 2008 Premium;
• Microsoft Windows Server 2003 x64 Standard Edition;
• Microsoft Windows Server 2003 x64 Enterprise Edition;
• Microsoft Windows Server 2003 x64 R2 Standard Edition;
• Microsoft Windows Server 2003 x64 R2 Enterprise Edition;
• Microsoft Windows Server 2008 x64 Standard Edition;
• Microsoft Windows Server 2008 x64 Enterprise Edition.
2. Microsoft Exchange Server 2007 (x64 version) or Microsoft Exchange Server 2007 SP 1 (x64 version), deployed in one or more configurations, as follows:
• Mailbox;
• Hub Transport;
• Edge Transport.
3. Microsoft Core XML Services (MSXML) 6.0.

1. One of the following operating systems:
• Microsoft Small Business Server 2008 Standard;
• Microsoft Small Business Server 2008 Premium;
• Microsoft Essential Business Server 2008 Standard;
• Microsoft Essential Business Server 2008 Premium;
• Microsoft Windows Server 2008;
• Microsoft Windows Server 2003 x64 (with installed Service Pack 2);
• Microsoft Windows Server 2003 x64 R2 Standard Edition;
• Microsoft Windows Server 2003 x64 R2 Enterprise Edition;
• Microsoft Windows XP x64 (with installed Service Pack 2);
• Microsoft Windows Vista x64;
• Microsoft Windows Server 2003 R2 Standard Edition;
• Microsoft Windows Server 2003 R2 Enterprise Edition;
• Microsoft Windows Vista;
• Microsoft Windows Server 2003 (with installed Service Pack 2);
• Microsoft Windows XP (with installed Service Pack 3).
2. Microsoft Management Console (MMC) 3.0
• To install the application, the user must have local administrator's rights.
• Application upgrade from Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 using the same language for localization as in the installable version is only supported.
• If an earlier version of Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 has been installed on the computer, it must be removed before installing this version of Kaspersky Security 6.0 for Microsoft Exchange Server 2007.
• If you are using Kaspersky Anti-Virus 5.5 for Microsoft Exchange Server 2000/2003 or Kaspersky Security 5.5 for Microsoft Exchange Server 2003, then during the transition to Microsoft Exchange Server 2007 you will be able to install Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 Critical Fix 1 with the existing key file.

KNOWN ISSUES

Installing, updating and removing the application:

• Warning! When cancelling the update of Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 Critical Fix 1 the anti-virus interceptors may become unregistered. In this case restoring the application using the distributive of the version the update has been performed from is recommended.
• Warning! When cancelling the removal of Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 the anti-virus interceptors may become unregistered. In this case restoring the application using the Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 Critical Fix 1 distributive is recommended.
• When updating the application to Kaspersky Security 6.0 for Microsoft Exchange Server 2007 Maintenance Pack 1 Critical Fix 1 the list of managed servers is removed from the Management Console snap-in.
• After application removal its empty folder remains on disk.
• In some cases e-mail notifications do not function after application setup and configuration of notifications. To solve the problem, restart the Microsoft Exchange Mail Submission service.

The peculiarities of installing, using and removing the application on a cluster of servers:

• Warning! The application must be installed to the same folder on all cluster nodes.
• Warning! During application installation and removal all Microsoft Exchange virtual servers must be active (online).
• Warning! It is not allowed to move virtual servers between the nodes during application installation and removal.
• In the event of occurence of errors connected with Active Directory in the Microsoft Windows application events log, you can configure the connection settings to the Active Directory using the ADConfig.xml file. For additional information about the format of the file content, please contact the Technical Support service.
• It is necessary to reconnect the Management Console to the Security Server if the cluster node is changed by the virtual server or if the Microsoft Exchange Store is offline.
• When managing a passive node, all changes in its configuration will be lost after this cluster node becomes active. Use this connection only for working with objects in Backup and viewing the accumulated statistics.

Database updates:

• If the path to the installation folder contains characters in national encoding, the database update will not function.
• Warning! Entering a special user account on the "Startup options" tab in the update settings window is necessary only when it is planned to perform updates from network folders. If this account is specified, update on the Microsoft Windows Server 2008 operating system with the enabled user account control (UAC) will not function.
• Update will not function, if a proxy server is used for access to the Internet and the user name of the corresponding proxy account contains characters in national encoding.
• If the option "Update regularly" is selected, then after restart of the Kaspersky Security 6.0 for Microsoft Exchange Server 2007 service the time of scheduled update launch will be counted from the moment of service restart.

Anti-virus scan and actions with objects:

• The anti-virus protection for Mailbox role is enabled or disabled one minute after selecting the corresponding option and not immediately. This is caused by certain peculiarities of VSAPI operation.
• In some cases, when "Replace with text" is specified as the action to be applied to objects, the replacement text may be displayed in wrong encoding.
• If an Exchange server is deployed as Mailbox and Hub Transport and the "Rename" action has been applied to the object, three records will appear in Backup for each detected object (the object will be processed once for Mailbox and twice for Hub Transport).
• During the scan password-protected archives are replaced with the Corrupted object.txt file.
• In some cases the application identifies multivolume archives as corrupted objects.
• After restart of Kaspersky Security 6.0 for Microsoft Exchange Server 2007 service the restriction specified in the "Stop background scan in… hours" field for the background storage scan started earlier stops working. As a result, the background scanning continues after the expiration of the specified period.
• Modification of the settings of any virus outbreak prevention rule resets the accumulated statistics for all rules. The application starts collecting the data for detection of virus outbreaks from scratch.
• If the Kaspersky Security 6.0 for Microsoft Exchange Server 2007 service is suspended, it will be restarted automatically after receiving an email message or connecting to the Management Console.

Management Console:

• Connecting the Management Console to servers with earlier versions of Kaspersky Security 6.0 for Microsoft Exchange Server 2007 may lead to an improper functioning of the application. You should use components from one and the same version for a proper functioning.
• Kaspersky Security 6.0 for Microsoft Exchange Server 2007 uses the 32-bit snap-in for the Management Console. To add a snap-in manually, use the mmc /32 command.
• When remote server properties are displayed, the Management Console shows the application version installed on the localhost.
• When the Management Console connects to a different server, it does not preserve user-defined filtering settings for the columns in Backup.
• If the Kaspersky Security 6.0 for Microsoft Exchange Server 2007 service is restarted while the Management Console is running, connection to the Security Server will be terminated and information in the Management Console will be displayed incorrectly. To solve the problem, restart the Management Console.

Miscellaneous:

• When sending a test message for verification of notification operation, a message is displayed with the "Message sent" text regardless of sending results. The results of the test message sending are contained in the application events log.
• Reports received by the Outlook Web Access client are displayed incorrectly: the information is not displayed, and the links do not work.