  Release Notes for McAfee(R) GroupShield(TM)
         Version 5.3 for Lotus Domino
                    Patch 1
     Copyright (C) 2004 Networks Associates
                Technology, Inc.
              All Rights Reserved


=====================================================

Patch Release:    01 December 2004

This release was developed and tested with:

- GroupShield:         5.3 for Lotus Domino
- DAT Version:         4398
- Engine Version:      4320

Make sure you have installed this version
before using this release.

=====================================================


Thank you for using GroupShield (TM) software.
This file contains important information
regarding this release. We strongly recommend
that you read the entire document

The attached files are provided as is, and with
no warranty either expressed or implied as to
their suitability for any particular use or
purpose. Network Associates, Inc. assumes no
liability for damages incurred either directly
or indirectly as a result of the use of these
files, including but not limited to the loss or
damage of data or systems, loss of business or
revenue, or incidental damages arising from
their use. Patch files should be applied only
on the advice of McAfee Security Technical
Support, and only when you are actually
experiencing the issue being addressed by the
Patch. Patch files should not be proactively
applied in order to prevent potential product
issues. You are responsible for reading and
following all instructions for preparation,
configuration, and installation of Patch files.
Patch files are not a substitute or replacement
for product Service Packs which may be released
by Network Associates, Inc. It is a violation
of your software license agreement to
distribute or share these files with any other
person or entity without written permission
from Network Associates, Inc. Further, posting
of McAfee Security Patch files to publicly
available Internet sites is prohibited. Network
Associates, Inc. reserves the right to refuse
distribution of Patch files to any company or
person guilty of unlawful distribution of
McAfee software products. Questions or issues
with McAfee Patch files should be directed to
McAfee Security Technical Support.


_____________________________________________________
WHAT'S IN THIS FILE

-   About This Release
   -   Purpose
   -   Resolved Issues
   -   Files Included with This Release
-   Installation
   -   Installation Requirements
   -   Installation Steps
   -   Testing Your Installation
   -   Removing This Patch
-   Contacting McAfee Security and Network
    Associates
-   Copyright, Trademark Attributions &
    Patents
   -   Trademarks
   -   License Agreement and Attributions

____________________________________________________
ABOUT THIS RELEASE


PURPOSE

This Patch addresses the issues shown in the
RESOLVED ISSUES section below.

This Patch is for use with GroupShield 5.3 
The Patch comprises one compressed
archive file

      GSD53P1EN.ZIP

This Patch also includes one file that replaces
the file GSD53.NAP on the McAfee ePolicy
Orchestrator server. This NAP file provides an
interface between the ePolicy Orchestrator server 
and the GroupShield for Lotus Domino software.


RESOLVED ISSUES


1.  Alerts were not sent properly in a multi Domain 
    environment.

2.  An 'Illegal function call' was error received when 
    opening the ePolicy Orchestrator managed On-Demand 
    document from a Lotus Notes client.

3.  FTP Login Credentials were not transferred from 
    ePolicy Orchestrator to the GroupShield 5.3 
    DAT update document.

4.  The Domino Server crashed when the inclusion settings 
    in GroupShield 5.3 were changed.

5.  Reply to an e-mail from a questionnaire based application 
    remained in the MAIL.BOX as NAI awaiting scan.

6.  Unable to update DAT when updated through 
    a proxy server that resided on a Unix based 
    operating system. 

7.  Infected attachment when scanned by GroupShield 5.3 
    allowed a zero byte file to be sent to the 
    Lotus Domino recipient.

8.  Unable to delete the Content Scan Rules from the 
    'Content Scan Rules' View at the ePolicy Orchestrator 
    Console.

9.  GroupShield sent alerts to Administrators with the message 
    "Unable to extract file from Note" for any kind of 
    unknown error that occurred while attempting to 
    extract a file from a Notes file.

    This Patch resolves this issue by treating such 
    Note files as unscannable and Administrators  
    will no longer get the old alert notification.  
    Instead they will receive alerts for 
    "unscannable files".  

    If you do not wish to receive these alerts, the 
    generic Alert may be turned off by entering the 
    following ini setting into the Notes.ini, 
    Ensure that there is a carriage return at the end of 
    the line otherwise Domino will not pick up the setting: 

    MCAFEE_GSD_DISABLE_GENERIC_ALERT=1,1,1,0  (default)

    Represents: Sender, Recipient, Administrator, Other. 
    Last digit should always be 0. 
    * 1 means that the Alert will go to the person 
    * 0 means that no Alert will be sent to the person. 
    The Other can not be specified and should always be set 
    to 0 any other value will not be valid. 

    To completely turn off the Generic Alert set all values 
    to 0.


10. Alert notification text configuration changed from
    <P> to [P] when pushed from ePolicy Orchestrator.

11. On the ePolicy Orchestrator computer, changing the 
    Default On-Access Inclusions to LOG.NSF and 
    Exclusions to NONE and applying them for the first 
    time did not cause a problem. However, a second policy 
    enforcement performed on the ePolicy Orchestrator Console 
    or performed automatically by the default 5 minute policy 
    enforcement that works locally on the computer, caused 
    the McAfee GroupShield Domino tasks to shut down.

12. When checking for work, the GroupShield Reporter
    task could cause a spike in CPU usage.

13. In certain circumstances, GroupShield 5.3 for
    Lotus Domino for Windows erroneously reported a
    low disk space condition.

14. Japanese Alert Message characters were incorrectly 
    translated.

15. With the Patch, the reliability of autoupdate via 
    FTP has been significantly improved.

16. GSD53.NAP file applied illegal settings 
    to GroupShield 5.3 and caused the server
    to stop working.

17. The ePolicy Orchestrator agent is reporting the 
    versions of GroupShield incorrectly.

18. When managed through ePolicy Orchestrator, some 
    GroupShield alert messages are incorrectly formatted 
    and, as a result, display the variable name rather than
    the variable value.  For example,

      An alert message, relating to a file infected
      with the EICAR test virus, would display:

            "The file was infected with the
             EXCEPTIONNAME virus"

      rather than

            "The file was infected with the EICAR
             test virus"

19. When managed through ePolicy Orchestrator, the 
    "Find Joke" option within the GroupShield Mailbox 
    settings is not always inherited correctly.

20. When managed through ePolicy Orchestrator, all 
    GroupShield alert settings are disabled and cannot 
    be re-enabled. This issue occurs on German language
    installations only.

21. GroupShield sent alerts to Administrators with the 
    message 'Unable to extract file from Note' in a 
    multiple shared mail Domino environment. 


FILES INCLUDED WITH THIS PATCH

This Patch consists of a package called
GSD53P1EN.ZIP, which contains the following
files

    GSD53.NAP	
	GroupShield 5.3/ePolicy Orchestrator NAP file

    GSDPATCH.EXE
	Patch installer file

    GSDPATCH1.NSF
	Patch database containing GroupShield 5.3 binaries

    PATCH.INI
	Patch initialization file

    README.TXT
	This readme file

_____________________________________________________
INSTALLATION

INSTALLATION REQUIREMENTS


    NOTE:

    This Patch only supports GroupShield for
    Lotus Domino 5.3 on Microsoft Windows.
    It does not work with earlier versions of
    GroupShield software.

    To check which version of GroupShield for
    Lotus Domino you have installed, at the
    Domino console, type:

    TELL MCAFEECONFIG VERSION

    If you have GroupShield for Lotus Domino
    5.3 installed, the console will show the
    product version as:

    5.3.xxxx.0

    where xxxx is a build number (1329 or above)
    that will vary depending on whether you
    have any hotfixes applied.

    IMPORTANT:
    This Patch replaces the existing database
    design in your GroupShield for Lotus Domino
    data directory, which is located within the
    Lotus Domino Data Directory under MCAFEE.
    McAfee recommends that you back up your
    existing GroupShield for Lotus Domino
    Configuration database before you install
    this Patch.


INSTALLATION STEPS

McAfee distributes this Patch in a compressed
format to reduce transmission time. To install
this Patch, follow these steps:


1.  Create a temporary directory on your hard
    disk, then copy GSD53P1EN.ZIP to this
    directory.

2.  Use a compression utility such as WinZip or
    PKZip to extract the Patch files from the
    GSD53P1EN.ZIP archive into your temporary
    directory.

3.  Make a backup copy of all databases.

4.  Shut down the Lotus Domino Server.

5.  Run GSDPATCH.EXE

    This will load the Patch Installer.

6.  Click the Patch button to begin the
    installation of the Patch.

7.  Once complete, click the Finish button.


To resolve the issue,

"An 'Illegal function call' was error received when 
opening the ePolicy Orchestrator managed On-Demand 
document from a Lotus Notes client."

mentioned in the Resolved Issues section above, 
perform the following steps:

1. At the Domino server's command prompt, enter
the following command to stop the Lotus
Domino server:

QUIT

2. Export the configuration of the GSD server. 

a. To do so, launch the McAfee Export Import wizard 
from Start > Programs > Network Associates > 
McAfee Export Import wizard.

b. Select "Export Configurations" and click on Next.

c. Leave the "Source" textfield to blank. 

d. In the "Export filename" under "Output" section, enter a 
filename to which the configuration will be exported.

e. In the "Export configuration for server name" under 
"Output" section, type in the name of the Domino server. 

f. Click on Next.

g. Click "Yes" on the dialog prompting to use the Local 
Domino server.

h. The remaining screens are set to default. Click on Finish.

3. Import the configuration of the GSD server.

a. To do so, launch the McAfee Export Import wizard 
from Start > Programs > Network Associates > 
McAfee Export Import wizard. 

b. Select "Import Configurations" and click on Next.

c. In the "Import filename" under "Input" section, browse to 
select the file created in step 4 above.

d. In the "Import configuration for server" under "Input" 
section, type in the name of the Domino server. 

e. Click on Next.

f. Click "Yes" on the dialog prompting to use the Local Domino 
server.

g. The remaining screens are set to default. Click on Finish.

4. Start the Lotus Domino server.


You only need to use the GSD53.NAP file contained in 
this Patch if you use ePolicy Orchestrator Version 2.5.1 
or later. The GSD53.NAP file must be applied to the 
ePolicy Orchestrator server.

Use this procedure to overwrite the existing
McAfee GroupShield Software Package in the ePolicy
Orchestrator Repository.

1.  Log on to the desired ePolicy Orchestrator
    server.

2.  In the console tree under ePolicy
    Orchestrator |<SERVER>, right-click
    Repository, then select Configure
    Repository. The Software Repository
    Configuration Wizard appears.

3.  Select Add new software to be managed, then
    click Next. The Select a Software Package
    dialog box appears.

4.  Select the Software Package (.NAP) file for
    the GroupShield for Lotus Domino product,
    then click Open. The Software Package file
    is uncompressed, then the individual files
    are added to the Repository.

5.  The installation begins. If there is an
    existing version of this NAP file already
    loaded you will be asked to confirm that
    you wish to overwrite the existing file.

6.  When the files are successfully installed,
    a message confirms the installation has
    completed. Any settings previously entered
    for client servers using GroupShield for
    Lotus Domino will remain unaltered.


TESTING YOUR INSTALLATION

You can test the operation of the software by
running the EICAR Standard AntiVirus Test File
on any computer where you have installed the
software. The EICAR Standard AntiVirus Test
File is a combined effort by anti-virus vendors
throughout the world to implement one standard
by which customers can verify their anti-virus
installations.

To test your installation:

1.  Copy the following line into its own file,
    then save the file with the name
    EICAR.COM.

       X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

    The file size will be approximately 70
    bytes.

2.  Start your anti-virus software and allow it
    to scan the directory that contains
    EICAR.COM.

    When your software scans this file, it will
    report finding the EICAR test file.

3.  Delete the file when you have finished
    testing your installation to avoid alarming
    unsuspecting users.

    IMPORTANT:
    Please note that this file is NOT A VIRUS.


For more information on the EICAR test file,
visit:

       www.eicar.org.


REMOVING THIS PATCH

To remove this Patch from your computer you
will be required to reinstall GroupShield 5.3
for Lotus Domino software

    NOTE:
    We recommend that you do NOT remove the
    Patch files from your GroupShield for Lotus
    Domino installation once you install them.
    If you reinstall your GroupShield for Lotus
    Domino 5.3 software, we recommend that
    you also reinstall the Patch.



_____________________________________________________
CONTACTING MCAFEE SECURITY & NETWORK
ASSOCIATES

Technical Support
    Home Page
       http://www.networkassociates.com/us/support/

    KnowledgeBase Search
       https://knowledgemap.nai.com/phpclient/homepage.aspx

    PrimeSupport Service Portal
       http://mysupport.nai.com

Login credentials required.


McAfee Security Beta Program
    Beta Web Site
       http://www.networkassociates.com/us/downloads/beta/

    E-mail
       avbeta@nai.com


Security Headquarters -- AVERT (Anti-Virus
Emergency Response Team)
    Home Page
       http://www.networkassociates.com/us/security/home.asp

    Virus Information Library
       http://vil.nai.com

    Submit a Virus Sample – AVERT WebImmune
       https://www.webimmune.net/default.asp

    AVERT DAT Notification Service
       http://vil.nai.com/vil/join-DAT-list.asp


Download Site
    Home Page
       http://www.networkassociates.com/us/downloads/

    DAT File and Engine Updates
       http://www.networkassociates.com/us/downloads/updates/

       ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

    Product Upgrades
       https://secure.nai.com/us/forms/downloads/upgrades/login.asp

Valid grant number required.
Contact Network Associates Customer Service


Training
    McAfee Security University
       http://www.networkassociates.com/us/services/education/mcafee/university.htm



Network Associates Customer Service
    US, Canada, and Latin America toll-free:
   Phone:     +1-888-VIRUS NO or
              +1-888-847-8766
              Monday - Friday, 8 a.m. - 8 p.m.,
              Central Time

   E-mail:    services_corporate_division@nai.com
   Web:       http://www.nai.com/us/index.asp
              http://www.networkassociates.com/us/index.asp


For additional information on contacting
Network Associates and McAfee Security –
including toll-free numbers for other
geographic areas - see the CONTACT file that
accompanied your original product release.



_____________________________________________________
COPYRIGHT, TRADEMARK ATTRIBUTIONS & PATENTS

Copyright (C) 2003 Networks Associates
Technology, Inc. All Rights Reserved. No part
of this publication may be reproduced,
transmitted, transcribed, stored in a retrieval
system, or translated into any language in any
form or by any means without the written
permission of Networks Associates Technology,
Inc., or its suppliers or affiliate companies.
To obtain this permission, write to the
attention of the Network Associates legal
department at:
5000 Headquarters Drive, Plano, Texas 75024, or
call +1-972- 963-8000.


TRADEMARKS

Active Firewall, Active Security, Active
Security (in Katakana), ActiveHelp,
ActiveShield, AntiVirus Anyware and design,
Appera, AVERT, Bomb Shelter, Certified Network
Expert, Clean-Up, CleanUp Wizard, ClickNet,
CNX, CNX Certification Certified Network Expert
and design, Covert, Design (stylized N), Disk
Minder, Distributed Sniffer System, Distributed
Sniffer System (in Katakana), Dr Solomon’s, Dr
Solomon’s label, E and Design, Entercept,
Enterprise SecureCast, Enterprise SecureCast
(in Katakana), ePolicy Orchestrator, Event
Orchestrator (in Katakana), EZ SetUp, First
Aid, ForceField, GMT, GroupShield, GroupShield
(in Katakana), Guard Dog, HelpDesk, HelpDesk
IQ, HomeGuard, Hunter, Impermia, InfiniStream,
Intrusion Prevention Through Innovation,
IntruShield, IntruVert Networks, LANGuru,
LANGuru (in Katakana), M and design, Magic
Solutions, Magic Solutions (in Katakana), Magic
University, MagicSpy, MagicTree, McAfee, McAfee
(in Katakana), McAfee and design, McAfee.com,
MultiMedia Cloaking, NA Network Associates, Net
Tools, Net Tools (in Katakana), NetAsyst,
NetCrypto, NetOctopus, NetScan, NetShield,
NetStalker, Network Associates, Network
Performance Orchestrator, NetXray, NotesGuard,
nPO, Nuts & Bolts, Oil Change, PC Medic,
PCNotary, PortalShield, Powered by
SpamAssassin, PrimeSupport, Recoverkey,
Recoverkey – International, Registry Wizard,
Remote Desktop, ReportMagic, RingFence, Router
PM, Safe & Sound, SalesMagic, SecureCast,
SecureSelect, SecurityShield, Service Level
Manager, ServiceMagic, SmartDesk, Sniffer,
Sniffer (in Hangul), SpamKiller, SpamAssassin,
Stalker, SupportMagic, ThreatScan, TIS, TMEG,
Total Network Security, Total Network
Visibility, Total Network Visibility (in
Katakana), Total Service Desk, Total Virus
Defense, Trusted Mail, UnInstaller, VIDS,
Virex, Virus Forum, ViruScan, VirusScan,
WebScan, WebShield, WebShield (in Katakana),
WebSniffer, WebStalker, WebWall, What's The
State Of Your IDS?, Who’s Watching Your
Network, WinGauge, Your E-Business Defender,
ZAC 2000, Zip Manager are registered trademarks
or trademarks of Network Associates, Inc.
and/or its affiliates in the US and/or other
countries. Sniffer(R) brand products are made
only by Network Associates, Inc. All other
registered and unregistered trademarks herein
are the sole property of their respective
owners.


LICENSE INFORMATION

License Agreement

NOTICE TO ALL USERS: CAREFULLY READ THE
APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO
THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE
GENERAL TERMS AND CONDITIONS FOR THE USE OF THE
LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH
TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE
CONSULT THE SALES AND OTHER RELATED LICENSE
GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU
HAVE RECEIVED SEPARATELY AS PART OF THE
PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT
CD, OR A FILE AVAILABLE ON THE WEB SITE FROM
WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF
YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH
IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE.
IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO
NETWORK ASSOCIATES, INC. OR THE PLACE OF
PURCHASE FOR A FULL REFUND.


Attributions

This product includes or may include:

-   Software developed by the OpenSSL Project
    for use in the OpenSSL Toolkit
    (http://www.openssl.org/).

-   Cryptographic software written by Eric
    Young and software written by Tim J.
    Hudson.

-   Some software programs that are licensed
    (or sublicensed) to the user under the GNU
    General Public License (GPL) or other
    similar Free Software licenses which, among
    other rights, permit the user to copy,
    modify and redistribute certain programs,
    or portions thereof, and have access to the
    source code.  The GPL requires that for any
    software covered under the GPL which is
    distributed to someone in an executable
    binary format, that the source code also be
    made available to those users.  For any
    such software covered under the GPL, the
    source code is made available on this CD.
    If any Free Software licenses require that
    Network Associates provide rights to use,
    copy or modify a software program that are
    broader than the rights granted in this
    agreement, then such rights shall take
    precedence over the rights and restrictions
    herein.

-   Software originally written by Henry
    Spencer, Copyright 1992, 1993, 1994, 1997
    Henry Spencer.

-   Software originally written by Robert
    Nordier, Copyright (C) 1996-7 Robert
    Nordier. All rights reserved.

-   Software written by Douglas W. Sauder.

-   Software developed by the Apache Software
    Foundation (http://www.apache.org/).

-   International Components for Unicode
    ("ICU") Copyright (C) 1995-2002
    International Business Machines Corporation
    and others. All rights reserved.

-   Software developed by CrystalClear
    Software, Inc., Copyright (C) 2000
    CrystalClear Software, Inc.

-   FEAD(R) Optimizer(R) technology, Copyright
    Netopsystems AG, Berlin, Germany.


V2.3.0
