About Hotfix 4 for Websense Email Security v7.3

-----------------------------------------------------------------------
Release Notes for Hotfix 4
-----------------------------------------------------------------------

This hotfix resolves the following customer issues:

Problem:

1. In the previous release, Websense Email Security incorrectly identified
   Microsoft Office documents that were attached to email messages as
   .zip files.

2. Redundant records (such as statistical data, message count, or aging
   alert messages) in the database increased the size of the STEMDashboard
   database. This caused the dashboard service to perform slowly.

   This hotfix removes the legacy data from the old database server so the
   the size of the database is reduced. It should now take around 10 seconds
   to start the dashboard service.

3. When Websense Email Security recieved a spam message that contained
   a long attribute value in HTML (for example, an invalid image URL in
   its body, or a URL link that was larger than 2K), the message parser
   quit responding.

   This hotfix improves the message parser's performance and processing
   each message should now take less than 30 seconds.

4. Sometimes the Authentium scanning engine produced an "unknown error"
   message when certain email messages were received. Whenever these
   error messages occurred, the email messages were moved to the
   \In\Authentium\Bad File folder.

  This hotfix upgrades the Authentium engine to the latest version.

5. When users accessed the dashboard, events displayed as "failed"
   even though they were working. A warning message alerted the user
   that the index failed:

     "Receive service has stopped  10:46 AM  MISTLE  Acknowledge 
     Rules service has stopped  10:46 AM  MISTLE  Acknowledge 
     Send service has stopped  10:46 AM  MISTLE  Acknowledge 
     Scheduler service has stopped  10:46 AM  MISTLE  Acknowledge."

   Attempts to clear the failed event were unsuccessful, as the event
   returned in 60 seconds or less. This occurred because redundant
   server names still remained in the database.

   This hotfix implements a new functionality that enables the user to
   delete Dashboard log records by server name. For instructions
   on how to do this, refer to the Knowledge Base article titled "How do
   I delete Dashboard log records by the server name?".

6. When users opened an attachment from the Web interface, HEX
   characters displayed instead of the actual content. This
   issue occurred for plain text documents and Microsoft Word, Excel,
   and PowerPoint documents.

   This hotfix adds MIME support for these file types.

7. When users opened quarantined messages from the Web interface,
   certain file types (such as jfif, png, cab, and wmv) do not
   display correctly in the Message Administrator. This issue
   occurred on Internet Explorer v7, v8, and v9, and Firefox browsers.

   This hotfix adds MIME support for the unsupported file types.

8. In Websense Email Security v7.3, users could not check the counter
   that showed the total volume of incoming email messages, because the
   performance counter for Receive Accepted Connections did not work.
   This issue occurred on Windows versions 2003 and 2003R2.

9. Websense Email Security sometimes quit responding when it recieved
   a HELP command in an SMTP connection. This also caused the connection
   to the Monitor and Rules Administrator to fail. In order to get
   Websense Email Security started again, users had to restart the
   application.

10. Websense Email Security sometimes quit responding when the Receive
    Service received an SMTP command that was too long. This issue
    occurred because a spammer had attempted to attack the system by
    sending an unusually long SMTP command (longer than what the SMTP
    protocol allows).

    The system now sends a 5xx error message and disconnects the
    current connection whenever a long SMTP command is recieved.

11. When users viewed the PEM Audit queue in Message Administrator,
    certain fields in the following columns displayed blank data:
    Audit Action, Rule Name, and Policy Type.

12. The subject line in notification messages generated by
    Websense Email Security sometimes appeared corrupt; symbols
    displayed instead of the actual characters.

13. Websense Email Security could not detect .exe files if they
    were in a subfolder inside a RAR archive file.

Download the hotfix from here.

-----------------------------------------------------------------------
Installation & Configuration
-----------------------------------------------------------------------

Use these procedures to install this hotfix.

Make sure that Websense Email Security v7.3 is installed before installing
this hotfix.

Installing this hotfix updates the following files located in the
installation directory:

 - plugins\scFootersPI.stp 
 - MailMessage.dll
 - scMonitorDLL.dll
 - WESAbout.dll
 - sefLDAP.dll
 - SystemConfiguration.dll
 - ScoutClassify.dll
 - PlugIns\TLSRequiredPI.stp
 - ContentAccess\DocumentDecomposition.exe
 - DashBoardMessages.dll
 - HtmlDocumentManager.dll
 - PlugIn.dll
 - UNRAR.exe
 - unrar.dll
 - STEMRULES.exe
 - STEMRCV.exe
 - STEMWADM.EXE
 - Dashboard\CATALINA_BASE\webapps\Dashboard.war
 - ReceiveConnectionLogic.dll
 - Dashboard\importcert.bat
 - scDBManagementTools.exe
 - Engines\C199AFCE-9C83-42f3-AF5C-41298F2B5579\aicam.dll
 - Engines\C199AFCE-9C83-42f3-AF5C-41298F2B5579\aidef.dll
 - Engines\C199AFCE-9C83-42f3-AF5C-41298F2B5579\aiio.dll
 - Engines\C199AFCE-9C83-42f3-AF5C-41298F2B5579\aise.dll
 - Engines\C199AFCE-9C83-42f3-AF5C-41298F2B5579\aivse000.dll
 - Engines\C199AFCE-9C83-42f3-AF5C-41298F2B5579\aivsec.dll
 - Database\WESVersions.xml
 - Database\WESDatabaseSQLScriptDefinition.xml
 - Database\STEMLog.2000.NEW.sql
 - Database\STEMLog.2005.NEW.sql
 - Database\STEMLog.2008.NEW.sql

Installation:
=============

To install Hotfix 4:

1. Download and extract the hotfix from the Websense Support
   Portal <www.websense.com/support/>  To a temporary directory
   (for example, C:\temp).  See Knowledge Base article 3216.

2. Double-click the executable file in this hotfix package.
 
3. Click the "Install" button and then follow the on-screen
   instructions.
 

Uninstallation:
==============

To uninstall Hotfix 4:

1. Double-click the hotfix installation executable.

2. Click the "Uninstall" button and then follow the on-screen
   instructions.

The software can automatically determine from system registry
values that it should perform an uninstall operation rather than
an installation.


 

Version checking: 

To determine which version of Websense Email Security is installed:
Open the Windows Control Panel and select "Add or Remove Programs".
From the list of programs, select "Websense Email Security" and click
the "Click here for support information" button.

To determine which version of Websense Email Security Hotfix is installed:
Open the system registry browser and check the value of
"HKEY_LOCAL_MACHINE\SOFTWARE\SurfControl plc\SuperScout Email Filter\73HF\LastHotfixversion\".

Note that installing or uninstalling this hotfix stops all Websense
Email Security services and closes all database connections.