What's New in GroupShield For Lotus Notes Version 3.13 (9703) Copyright 1994-1997 by McAfee, Inc. All Rights Reserved. Thank you for using McAfee's GroupShield for Lotus Notes, anti-virus protection for Lotus Notes servers. This What's New file contains important information regarding the current version of this product. It is highly recommended that you read the entire document. McAfee welcomes your comments and suggestions. Please use the information provided in this file to contact us. ___________________ WHAT'S IN THIS FILE - New Features - Known Issues - Installation - Documentation - Frequently Asked Questions - Contact McAfee ____________ NEW FEATURES 1. Full support for Notes v4.5 including Domino Server and Web Navigator focused scanning. GroupShield and GroupScan can now be configured to provide "on access" protection to Domino databases being accessed by any Web browser. 2. Enhanced Real-time Mail Agent Protection. GroupShield's NWall process provides real-time scanning and cleaning of external mail and it’s attachments. Full compatiblility with the Lotus Notes SMTP agent provides both send and recieve protection of Internet mail and the Notes mail system. 3. New GroupShield Administrator with LiveNotes(tm) technology. An easy to use, Notes based interface for configuring, monitoring and troubleshooting all of the GroupShield components. 4. New VirusScan engine .DLL integration provides improved performance for attached file scanning and eliminates conflicts with installed file scanning engines. 5. Enhanced the Notes native macro scanning engine. Updated and improved the heuristics analysis of the macro language, increasing protection and reducing false alarms. 6. Added GroupShield Trusted Signers option. This feature is similar to ECLs in that it allows for "signers" of messages to have messages excluded from scanning. This is useful for Notes developers during a development phase to prevent possible false alarms from being generated. 7. GroupShield can now be run as an NT Service. Support for Notes v4.1x and v4.5x running as an NT Service. 8. GroupShield can now use the McAfee Alert Manager for extended notification options. Integration with the McAfee Alert manager allows for additional notification methods such as; NT Event Log, Paging and SNMP alerting. 9. Notes e-mail notification messages can now be sent across Notes domains. GroupShield will now send Notification messages using the %FromDomain field in addition to the %From field. 10. Enhanced notification message options for greater flexibility in creating the notification message that is sent. ___________ KNOWN ISSUES 1. When restoring quarantined documents with a stored form size greater than 16KB, Notes R3 reports that it cannot be copied. However, the macro does complete all steps except the restoration of the stored form. The workaround for this is to continue the restoration process until the document is copied into the source database. Then select the newly restored document in the source database, and invoke the Tools/Refresh Fields/Selected Documents menu option. This will copy a new stored form into the document. 2. NScan may appear to hang when the Quarantine Area or another database is undergoing a Fixup. Generally this occurs after Notes abnormally terminates while accessing a database. The next time the database is accessed, Notes will automatically invoke the Fixup process to check and possibly fix the database. 3. To avoid a replication storm when using the +T option for NScan, use +W (which limits the scan to only recent documents) with +T. This provides the benefits of +T without causing unnecessary replication to occur. 4. If the Notes engine crashes while attempting to process corrupted documents, you can use the /L option with NScan to identify which document is generating the crash. This creates the NSCAN.LOG that will contain the information necessary to identify and remove the corrupted documents. 5. It is currently not possible to scan Notes R4 databases with the Notes R3 versions of GroupShield. If attempted, an error is logged and the database is skipped. 6. If a mail recipient is not valid in GroupShieldNotifyList, the notification mail message will not be sent and an error is logged. ____________ INSTALLATION * PRIMARY PROGRAM FILES FOR GROUPSHIELD * Files located in the Install directory: ======================================= 1. Installed for all platforms: README.1ST = McAfee information AGENTS.TXT = McAfee authorized agents PACKING.LST = Packing list WHATSNEW.TXT = What's New document SCAN.DAT = Virus scan definition data NAMES.DAT = Virus names definition data CLEAN.DAT = Virus clean definition data Files located in the \NOTES\PROGRAM directory: ========================================== 1. Installed for Windows 95/Windows 3.1x/Windows NT/OS/2 servers: NSCAN.EXE = Scan program 2. Installed for Windows 95: NNMENU.DLL = Menu add-in NNSHIELD.DLL = NShield program NNWALLM.DLL = NWall monitor NLIVEN.DLL = LiveNotes (tm) monitor 3. Installed for Windows NT: NNMENU.DLL = Menu add-in NNSHIELD.DLL = NShield program NNWALL.EXE = NWall server add-in task program NNWALLM.DLL = NWall monitor NLIVEN.DLL = LiveNotes (tm) monitor 4. Installed for OS/2: $NSHIELD.DLL = NShield program $NMENU.DLL = Menu add-in $NWALLM.DLL = NWall monitor $NWALL.EXE = NWall server add-in task program (Notes R3) INWALL.EXE = NWall server add-in task program (Notes R4) $LIVEN.DLL = LiveNotes (tm) monitor 5. Installed for Netware: NSCAN.NLM = NScan program VNSHIELD.NLM = NShield program VNWALLM.DLL = NWall program VNWALL.NLM = NWall server add-in task program VLIVEN.DLL = LiveNotes (tm) monitor Files located in the \NOTES\DATA directory: ============================================ 1. Installed for all platforms: QAREA.NTF = Quarantine Area database template GSGUIDE.NSF = GroupShield documentation in Notes database format GSAV.NSF = GroupShield Administration database _____________ DOCUMENTATION For more information, refer to the User's Guide, included on the CD-ROM versions of this program or available from McAfee's BBS and FTP site. This file is in Adobe Acrobat Portable Document Format (.PDF) and can be viewed using Adobe Acrobat Reader. This form of electronic documentation includes hypertext links and easy navigation to assist you in finding answers to questions about your McAfee product. Adobe Acrobat Reader is available on CD-ROM in the ACROREAD subdirectory. Adobe Acrobat Reader also can be downloaded from the World Wide Web at: http://www.adobe.com/Acrobat/readstep.html GroupShield documentation can be downloaded from McAfee's BBS or the World Wide Web at: http://www.McAfee.com or http://205.227.129.97 For more information on viruses and virus prevention, see the McAfee Virus Information Library, MCAFEE.HLP, included on the CD-ROM version of this product or __________________________ FREQUENTLY ASKED QUESTIONS Regularly updated lists of frequently asked questions about McAfee products also are available on McAfee's BBS, website, and CompuServe and AOL forums. Q: What options do I use to only scan file attachments? A: Use the following options to enable file attachment scanning alone: +A -O -R -Z. GroupShield has four separate scanners that scan the following: file attachments, OLE objects, rich text fields, and stored forms. Q: When is it desirable to use the /SCAN and /CLEAN options? A: Use the NScan command-line options /CLEAN and /SCAN to enable file attachment scanning (+A) and rich-text field scanning (+R). These options override the options set in GroupScanOptions and the -A or -R option that appears in the NOTES.INI. McAfee recommends that you not use the /CLEAN and /SCAN options if attachment scanning or rich-text field scanning needs to be disabled. Q: Can I update GroupShield's data files to detect new viruses? A: If you have Internet access, you can download updated GroupShield data files from the McAfee Web Site, BBS, or other online resources. To download from the McAfee Web Site, follow these steps: 1. Go to the McAfee Web Site (http://www.mcafee.com or http://205.227.129.97). 2. Click on the Download McAfee button in the upper left hand column or frame. 3. Click Get that DAT! to update DAT files. 4. View the information provided on new DAT files and downloading. 5. Click on Download this Month's DAT. 6. Data file updates are stored in a compressed form to reduce transmission time. Unzip the files into a temporary directory, then copy the files to the appropriate directory, replacing your old files. 7. Before performing any scans, shut down your computer, wait a few seconds, and turn it on again. If you need additional assistance with downloading, contact McAfee Download Support at (408) 988-3832. ______________ CONTACT McAFEE * FOR QUESTIONS, ORDERS, PROBLEMS, OR COMMENTS * Contact McAfee's Customer Care department: 1. Call (408) 988-3832 Monday-Friday, 6:00 A.M. - 6:00 P.M. Pacific time 2. Fax (408) 970-9727 24-hour, Group III fax 3. Fax-back automated response system (408) 988-3034 24-hour fax Send correspondence to any of the following McAfee locations. McAfee Corporate Headquarters 2710 Walsh Avenue Santa Clara, CA 95051-0963 McAfee East Coast Office Jerral West Center 766 Shrewsbury Avenue Tinton Falls, NJ 07724-3298 McAfee Central Office 5944 Luther Lane, Suite 117 Dallas, TX 75225 McAfee Canada 178 Main Street Unionville, Ontario Canada L2R 2G9 McAfee Europe B.V. Orlyplein 81 - Busitel 1 1043 DS Amsterdam The Netherlands McAfee (UK) Ltd. Hayley House, London Road Bracknell, Berkshire RG12 2TH United Kingdom McAfee France S.A. 50 rue de Londres 75008 Paris France McAfee Deutschland GmbH Industriestrasse 1 D-82110 Germering Germany Or, you can receive online assistance through any of the following resources: 1. Bulletin Board System: (408) 988-4004 24-hour US Robotics HST DS 2. Internet e-mail: support@mcafee.com 3. Internet FTP: ftp.mcafee.com or 205.227.129.134 4. World Wide Web: http://www.mcafee.com or http://205.227.129.97 5. America Online: keyword MCAFEE 6. CompuServe: GO MCAFEE 7. The Microsoft Network: GO MCAFEE Before contacting McAfee, please make note of the following information. When sending correspondence, please include the same details. - Program name and version number - Lotus Notes platform and release number. - Type and brand of your computer, hard drive, and any peripherals - Operating system type and version - Network name and operating system used by Lotus Notes - Amount of installed RAM and hard disk space - Printouts of NOTES.INI and the SHOW STATS server console command - Microsoft service pack, where applicable - Network card installed, where applicable - Modem manufacturer, model, and baud, where applicable - Relevant browsers/applications and version number, where applicable - Problem - Specific scenario where problem occurs - Conditions required to reproduce problem - Statement of whether problem is reproducible on demand - Your contact information: voice, fax, and e-mail Other general feedback is also appreciated. * FOR ON-SITE TRAINING INFORMATION * Contact McAfee Customer Service at (800) 338-8754. * FOR PRODUCT UPGRADES * To make it easier for you to receive and use McAfee's products, we have established an Agents program to provide service, sales, and support for our products worldwide. For a listing of agents, see the file AGENTS.TXT, where applicable, or contact McAfee Customer Service for agents near you.