| Subcribe via RSS

What does VDI awareness in Trend Micro OfficeScan 10.5 imply?

November 10th, 2010 | No Comments | Posted in Security, Software, Trend Micro

One of the new features of Trend Micro OfficeScan 10.5 is “Virtual Desktop Infrastructure awareness”.
But what does this mean? Trend has implemented two features, to ease the performance impact of running anti-virus in a virtual environment.

First of all, before performing a full system scan, OfficeScan will check with the server if other systems in the environment are also running a full scan. In order to avoid multiple full system scans in the same environment.

Second, they implemented the option to scan a virtual machine template. And save the results as a cache (which will be used when performing a full system scan).

Tags: , , , ,

Trend Micro Smart Scan Server 2.0 and OfficeScan 10.0 SP1

October 7th, 2010 | No Comments | Posted in Security, Trend Micro

When Trend Micro released OfficeScan 10.5 they also released Smart Scan Server 2.0. But is Smart Scan Server 2.0 compatible with OfficeScan 10.0? I’ve tested it with OfficeScan 10.0 SP1, and it works without any problem. Of course you wont be able to use the “local” Web Reputation Server included in the Smart Scan Server without installing OfficeScan 10.5. But the File Reputation Service is working perfectly.

By installing the Smart Scan Server 2.0, you will get the following features:
– “Local” Web Reputation Server
– Additional Widgets
– Web Access and Pattern Update Log
– Notifications through email and SNMP
– Multi language web interface

Full installation readme:
http://www.trendmicro.com/ftp/documentation/readme/tmcss-2.0.1336-1-x86_64-DVD_README-en.txt

Patch update readme:
http://www.trendmicro.com/ftp/documentation/readme/PatchPackage-2.0-1336.x86_64_README-en.txt

Tags: , , , , , ,

Trend Micro OfficeScan: Installation

July 2nd, 2010 | No Comments | Posted in Security, Software, Trend Micro

Here we go. The first article in my OfficeScan how-to series.

So, how to install Trend Micro OfficeScan 10.0:

These are the steps:

1. Generate Trial license

2. Download software

3. Prepare server

4. Install OfficeScan server

More »

Tags: , , , ,

OfficeScan how-to series

July 1st, 2010 | No Comments | Posted in Security, Software, Trend Micro

I have had an overwhelming response to my “Thoughts about OfficeScan 10“.

And I’m simply not able to answer all the questions regarding installation and troubleshooting.

Therefore I have decided to write a series of posts/articles, to try to answer all of your questions, and to cover some general topics.

So, this is the articles I’ve planned to write:

Trend Micro OfficeScan: Installation

Trend Micro OfficeScan: Smart Scan Server

Trend Micro OfficeScan: Deployment

Trend Micro OfficeScan: Server Components

Trend Micro OfficeScan: Troubleshooting

If anyone has any request/wishes regarding content and topics, please feel free to leave a comment!

Read the original thoughts on OfficeScan 10 (just me ranting):

http://technoblog.org/2009/09/trend-micro-officescan-10-some-thoughts/

Tags: , , ,

Trend Micro OfficeScan 8.0 Windows 7 Support

January 26th, 2010 | 2 Comments | Posted in Security, Software, Trend Micro

With the newest patch, OfficeScan 8.0 supports Windows 7.

This is Trend Micro OfficeScan 8.0 SP1 Patch 5

Full readme can be found here:
http://www.trendmicro.com/ftp/documentation/readme/OSCE_80_Win_SP1_Patch5_en_readme.txt

It’s important to notice that only the following drivers are compatible with Windows 7:

Virus Scan Engine (8.952 or higher)
Virus Cleanup Engine (6.2.1016 or higher)
Anti-rootkit Driver (2.8.1063 or higher)
Common Firewall Driver (NSC) (5.8.1092 or higher)

Virus Scan Engine and Virus Cleanup Engine can be updated from the Active Update server.

Anti-rootkit Driver and the Common Firewall Driver (NSC) are included in this patch.

I haven’t had time to test if this actually works on Windows 7. If anyone has, please feel free to leave a comment. I will test it as soon as I can.

Tags: , , ,

Trend Micro: Rollback of VSAPI Version 9.000 from ActiveUpdate

November 24th, 2009 | No Comments | Posted in Security, Software, Trend Micro

Some of might have noticed this, but I’m writing a post about it any way.

Trend Micro is now rolling back the VSAPI 9.000 from ActiveUpdate. Reason: “There have been reports of issues on the following products scanning certain malformed PDF files”.

The version available through ActiveUpdate is now 9.100.1001, this is essentially version 8.952.

The products affected are:
OfficeScan
ServerProtect
Worry-Free Business Security (WFBS)

Earlier, they sent out an advisory about VSAPI 9.000 and problems with Windows NT (think it was OfficeScan 7.3 and ServerProtect). The problems resulted in the Scan Engine being unable to load the pattern files.

Read the entire Customer Notification here:

CUSTOMER NOTIFICATION Rollback of VSAPI Version 9.000 from ActiveUpdate

Tags: , , , , , , , ,

Trend Micro VSAPI 9.000 soon available through ActiveUpdate

November 9th, 2009 | No Comments | Posted in Security, Software

If you didn’t get the latest Technical Advisory from Trend Micro
Here is a brief summary.

On November 16, 2009, Trend Micro will make the VSAPI 9.000 available through ActiveUpdate (AU).

It will be released for the following products:
– OfficeScan
– Client Server Messaging Suite / Client Server Suite
– Worry Free Business Security
– ServerProtect for NT
– Trend Micro Control Manager

And it will include the following new features:
– Support for the detection of files that contain known PDF exploits
– Support for shellcode detection
– Recognition of the following additional file types:
– Flash Video (FLV)
– Microsoft Document Imaging (MDI)
– Moving Picture Experts Group (MPEG)
– QuickTime (MOV)
– RIFF
– SITX
– ZIP64
– Support for the detection of exploits to Microsoft Office vulnerabilities

Edit: The entire Advisory has been posted on the TCSE community – from ACAPacific blog.

Tags: , , , , , , ,

Trend Micro OfficeScan 10 – Some thoughts

September 1st, 2009 | 48 Comments | Posted in Security, Software

So, just some thoughts about Trend Micro OfficeScan 10. Its been some months now, since the GM build release of OfficeScan 10. And most people should have had enough time to test it properly. So what are the current pros and cons? Should you upgrade, or wait a bit longer? Anyone?

In my opinion:
It depends on your values.
You should upgrade if the new features appeals to you. The Device Control, and the Smart Network stuff.

But, performance wise, there are still some issues. E.g.: Extracting a Windows XP cd (from an ISO file) takes at least 50% more time with OfficeScan 10 (using Winrar). This is with conventional scan mode, I get about the same results with Smart Scan, but you can’t really compare it, since its not cached.

In addition, the Trend Micro Unauthorized Change Prevention Service (tmbsrv.exe) is a nice feature, but I believe it requires a bit more resources than the old Watchdog service.

So what about the stand alone scan server? I haven’t had time to test this one properly, at least not performance wise. So if anyone has done any real performance testing, with 100-500+ clients, I would really like to know. At least Trend Micro managed to get something right with the new Smart Scan feature. If what I’m seeing is correct, the impact on the network is really low. Sending those hashes back and fourth doesn’t consume that much bandwidth. Yay!

And just one last tip: When you install OfficeScan 10, install the integrated scan server. Even though you`re not planning to use it. Why? Because its really complicated to install it after you`ve finished the installation of the OfficeScan server. Just install it, and remove it from the list of scan servers in the GUI.

Anyway, if my sense of time is correct, its about two weeks left, until the Service Pack 1 of OfficeScan 10 is released to the public. The beta looked okay, but I`m really curious whether or not they managed to fix some of those performance issues.

Tags: , , ,
technoblog@trap.threatobs.com