Kaspersky Anti-Virus 5.6 for Microsoft ISA Server 2004/2006 Enterprise Edition Maintenance Pack 1 (build 1216) ------------------------------------------------------------------------------ DESCRIPTION Kaspersky Anti-Virus 5.6 for Microsoft ISA Server 2004/2006 Enterprise Edition (hereafter referred to as Kaspersky Anti-Virus) provides anti-virus scanning of objects transferred using the HTTP and FTP protocols via Microsoft ISA Server. ------------------------------------------------------------------------------ WHAT'S NEW Maintenance Pack 1 adds the following functionality to Kaspersky Anti-Virus 5.6 for Microsoft ISA Server 2004/2006 Enterprise Edition: - RFC 775 support for FTP; - support for partial content download over FTP; - recognition of various media formats to be excluded from anti-virus scan (streaming content from popular resources such as YouTube); - increase in object transfer rate after anti-virus scan completion; - wildcards are now allowed in domain names within definition of policy to exclude certain websites from anti-virus scan. A domain name template in the policy definition must look like *., where the wildcard '*' may conceal any number of lower-level domains (in relation to ). An example of valid template: - *.microsoft.com - the following names conform to this template: microsoft.com, www.microsoft.com, files.download.microsoft.com etc. Restrictions: - protocol prefixes are not allowed (templates of the following form are invalid and are ignored: 'http://*.microsoft.com', *://*.microsoft.com'); - concealment of the part of domain name of any level is not allowed (templates of the form '*soft.com' are invalid and are ignored); - the wildcard '*' cannot be used in the template more than once (templates of the form '*.c.*.microsoft.com' are invalid and are ignored). - some object types and domains are excluded from anti-virus scan; - HTTP partial content download is now disabled by default. ------------------------------------------------------------------------------ FIXED: - memory leak in applying the policies of exclusion from anti-virus scan; - memory leak in caching anti-virus scan statuses; - spontaneous switch of the application to the "Administration only" mode with the valid license key installed; - HTTP-header parsing error which could result in blocking access to some websites; - an error in complex object transfer via HTTP which could result in inability to download objects with large anti-virus scan time; - an error in FTP-filter which could result in inability to download objects with large anti-virus scan time; - incorrect connection closure in FTP-filter. This error manifested itself as inability to upload files to FTP-server if other FTP-related filters were installed on the Microsoft ISA Server; - inability to install Kaspersky Anti-Virus for Microsoft ISA Server on the computer with Microsoft Windows Installer 2.0; - an error which could prevent Kaspersky Anti-Virus service from stopping until database update is completed. ------------------------------------------------------------------------------ INSTALLATION Minimum software and hardware requirements: - Intel Pentium III 733 MHz or higher; - 512 MB RAM; - 50 MB hard disk space for program installation; - 200 MB hard disk space for temporary storage of data; - Microsoft Windows 2003 Server operating system; - Microsoft ISA Server 2004/2006 Enterprise Edition. Local administrative rights are required to install Kaspersky Anti-Virus. ISA Array administrative rights are also required. The installation must be performed using the same user name and password on all array servers. Install the application to the same folder on all array servers, for example, C:\Program Files\Kaspersky Lab\Kaspersky Anti-virus for ISA Server. This is due to the limitations of Microsoft ISA Server on the installation path for Web filters. ------------------------------------------------------------------------------ UPGRADE OF PREVIOUS VERSIONS OF KASPERSKY ANTI-VIRUS This Maintenance Pack 1 can only be used to upgrade Kaspersky Anti-Virus 5.6 build 1158 for Microsoft Server 2004/2006 Enterprise Edition. In case you have any other version of Kaspersky Anti-Virus 5.6 for Microsoft Server 2004/2006 Enterprise Edition installed, please uninstall your current version first. ------------------------------------------------------------------------------ KNOWN ISSUES AND WORKAROUNDS - Using download managers may increase the external traffic if the partial content download is allowed in Kaspersky Anti-Virus settings. Microsoft ISA Server may download several parts of the file the user has requested more than once due to the specific features of the most widespread download managers. The client receives the requested file in normal status but the volume of data downloaded from remote servers exceeds the size of the requested object. The volume of ‘odd’ data may vary over a wide range depending on the size of the requested object, settings and download manager operation algorithm. Traffic increase can be avoided using one of the following methods: • In the download manager settings, limit the number of sections being downloaded simultaneously, assigning it the value equal to one. This will disable the download acceleration but still preserves the possibility to resume the object download after a disconnection. • Disable the partial content download option in Anti-Virus settings.