             Release Notes for McAfee(R)
     WebShield(R) appliance version 3.0.2/3.0.3.
                   HotFix 238618.
           Copyright (C) 2005 McAfee, Inc.
                All Rights Reserved.


==========================================================

Release date:          July 29th, 2005.

This release was developed and tested with:

- WebShield(R) version:3.0.2/3.0.3
- DAT version:         4536
- Engine version:      4400
- Pre-requisites       Service Pack 1 for 3.0.2
                       only.

Make sure you have installed this version before
using this release.

==========================================================


Thank you for using WebShield(R) appliance software.
This file contains important information regarding
this release. We strongly recommend that you read
the entire document.


The attached files are provided as is, and with no
warranty either expressed or implied as to their
suitability for any particular use or purpose.
McAfee, Inc. assumes no liability for damages
incurred either directly or indirectly as a result
of the use of these files, including but not limited
to the loss or damage of data or systems, loss of
business or revenue, or incidental damages arising
from their use. Patch files should be applied only
on the advice of McAfee Technical Support, and only
when you are actually experiencing the issue being
addressed by the Patch. Patch files should not be
proactively applied in order to prevent potential
product issues. You are responsible for reading and
following all instructions for preparation,
configuration, and installation of Patch files.
Patch files are not a substitute or replacement for
product Service Packs which may be released by
McAfee, Inc. It is a violation of your software
license agreement to distribute or share these files
with any other person or entity without written
permission from McAfee, Inc. Further, posting of
McAfee Patch files to publicly available Internet
sites is prohibited. McAfee, Inc. reserves the right
to refuse distribution of Patch files to any company
or person guilty of unlawful distribution of McAfee
software products. Questions or issues with McAfee
Patch files should be directed to McAfee Technical
Support.


__________________________________________________________
WHAT'S IN THIS FILE
-   About This Release
   -   Purpose
   -   Resolved Issues
   -   Files Included with This Release
-   Installation
   -   Installation Requirements
   -   Installation Steps
   -   Removing this Release
-   Participating in the McAfee Beta Program
-   Contact Information
-   Copyright & Trademark Attributions
-   License Information

__________________________________________________________
ABOUT THIS RELEASE

PURPOSE

This HotFix addresses the issue shown in the
RESOLVED ISSUE section below.

RESOLVED ISSUES:

1.  ISSUE:
    When viewing a logging and alerting report, it's
    possible to export the contents of the report to
    a file. The default filename did not correctly
    reflect the date range set for the query.

    RESOLUTION:
    The date range is now reflected in the default
    file name.

2.  ISSUE:
    When listing a large number of mails in the
    quarantine content or viruses, a few mails may
    not be listed due to incorrectly parsed mail
    ids.

    RESOLUTION:
    All mails are now displayed.

3.  ISSUE:
    In non-GMT timezones the RFC2822 datetime was
    displayed incorrectly in the 'Received:" field
    in an email header.

    RESOLUTION:
    The datetime is now displayed in the correct
    timezone and in the correct RFC2822 stipulated
    format.

4.  ISSUE:
    In the policy Alert Settings, it is possible to
    change the default alert file name. In the SMTP
    protocol, the new file name was not used when
    certain viruses were detected.

    RESOLUTION:
    The user defined alert file name is used for all
    virus detections.

5.  ISSUE:
    Deferred mails can not be viewed from the user
    interface if WebShield is trying to resend
    them.

    RESOLUTION:
    Deferred mails can be viewed from the user
    interface.

6.  ISSUE:
    The ePO server Statistics -> ThroughputByDay,
    Statistics -> ThroughputByWeek & Statistics ->
    ThroughputByMonth reports do not display the
    SMTP SPAM Blocking statistics counter.

    RESOLUTION:
    The ePO server Statistics -> ThroughputByDay,
    Statistics -> ThroughputByWeek & Statistics ->
    ThroughputByMonth reports have been modified to
    include the SMTP SPAM Blocking statistics
    counter, to be displayed in the report chart,
    when information is present for this statistics
    counter.

    Note: This resolution requires BZ_236969.nap to
    be installed on the ePO server. Please refer the
    installation steps below.

7.  ISSUE:
    Should the WebServer, in response to an HTTP
    request, close the TCP connection without
    sending any response data, the appliance sends
    an HTML error message to the client stating that
    the "server terminated the connection".

    RESOLUTION:
    Configuration option is provided so that the
    appliance will, under these circumstances, close
    the connection to the client immediately without
    sending any HTML message. This gives the client
    the opportunity of re-trying the request (Such
    is the behavior of most browsers).

    Note: Please refer technical note:
    "Option to close the connection with the client.pdf" in order to configure this
    feature.

8.  ISSUE:
    In the ePO Reporting Console the 'Report ->
    Anti-Virus' reports display the filename
    containing the infection when a HTTP virus hit
    occurs in the WebShield appliance.

    RESOLUTION:
    In the ePO Reporting Console the 'Report ->
    Anti-Virus' reports should display the URL not
    the filename when a HTTP virus hit occurs in the
    WebShield appliance. The WebShield metadata has
    been modified to forward the URL instead of the
    filename when a HTTP virus hit occurs.

9. ISSUE:
    When the user does a configuration change
    through the user interface and click on "Apply
    all changes", the connectivity with the
    appliance from the user interface is lost.

    RESOLUTION:
    The user can apply all changes successfully.

10. ISSUE:
    In the ePO Reporting Console the 'Reports ->
    Anti-Spam -> Top Ten Spam Recipients' and
    'Reports -> Anti-Spam -> Top Ten Src IP Address'
    reports are not displayed correctly on the
    Japanese installation of ePO, they are garbled.

    RESOLUTION:
    In the ePO Reporting Console the 'Reports ->
    Anti-Spam -> Top Ten Spam Recipients' and
    'Reports -> Anti-Spam -> Top Ten Src IP Address'
    reports now display correctly on the Japanese
    installation of ePO.

    Note: This resolution requires BZ_221039.nap to
    be installed on the ePO server. Please refer the
    installation steps below.

11. ISSUE:
    In the ePO Reporting Console the 'Reports ->
    Anti-Spam -> Top Ten Spam Recipients' report
    does not load.

    RESOLUTION:
    In the ePO Reporting Console the 'Reports ->
    Anti-Spam -> Top Ten Spam Recipients' report now
    loads correctly.

    Note: This resolution requires BZ_238686.nap to
    be installed on the ePO server. Please refer the
    installation steps below.

12. ISSUE:
    In the ePO Reporting Console the 'Reports
    ->Anti-Virus->Infection->WebShield->Content
    Scanning Detections by Appliance' report
    displays 'No data found' even when WebShield
    SMTP content scanning events are present.

    RESOLUTION:
    WebShield now forwards the correct information
    for SMTP content scanning events resulting in
    the 'Reports
    ->Anti-Virus->Infection->WebShield->Content
    Scanning Detections by Appliance' now displaying
    the correct data for SMTP content scanning
    events.

    Note: This resolution requires BZ_243888.nap to
    be installed on the ePO server. Please refer the
    installation steps below.

13. ISSUE:
    If file filter detection occurs on an e-mail
    containing a virus, secondary actions trigger
    for both detections.

    RESOLUTION:
    It is now possible to disable secondary actions
    when file filter detection occurs on an e-mail
    containing a virus.

    Note: Please refer technical note:
    "Disable seconday actions.pdf" in order to configure this
    feature.

14. ISSUE:
    When a change to the download schedule
    configuration change is made the appliance
    performs a full network restart causing network
    connectivity to be lost.

    RESOLUTION:
    We only perform a full network restart when the
    network configuration changes, other changes
    will cause updates to the specific subsystem.

15. ISSUE:
    When saving large log files, the time spent in building the log
    archive could exceed 15 minutes. But the user interface currently
    terminates the job when it lasts more than 15 minutes.

    RESOLUTION:
    The timeout is now increased to 1 day.
    
FILES INCLUDED WITH THIS RELEASE

       BZ_221039.nap
       BZ_236969.nap
       BZ_238676.nap
       BZ_243888.nap

       WSe30HF238618-923.110.zip which contains the following:
            HF238618-923.110/installscript
            HF238618-923.110/script
            HF238618-923.110/version
            HF238618-923.110/reboot_ui
            HF238618-923.110/prerequisites
            HF238618-923.110/services_stop
            HF238618-923.110/savefiles
	    HF238618-923.110/cleanpwf.py
            HF238618-923.110/message_functions.bash
            HF238618-923.110/add_info
            HF238618-923.110/rpms/webshield-comp-6.0-200507041108.i386.rpm
            HF238618-923.110/rpms/webshield-ui-6.0-200507041108.i386.rpm
            HF238618-923.110/rpms/webshield-app-ui-6.0-200507041108.i386.rpm
	    HF238618-923.110/rpms/webshield-escm-6.0-200507041108.i386.rpm
            HF238618-923.110/rpms/webshield-files-6.0-200507041108.i386.rpm
            HF238618-923.110/rpms/webshield-statsrs-6.0-200507041108.i386.rpm
            validate/version
            validate/filelist.txt
            validate/validate.txt
            validate/md5sum.txt

_________________________________________________________
INSTALLATION

INSTALLATION REQUIREMENTS

To use this release, you must have WebShield(R)
appliance version 3.0.2/3.0.3 software installed on
the appliance you intend to update.

INSTALLATION STEPS

To install the HotFix and the NAPs, create a
temporary directory on your hard disk and download
file "WSe30HF238618-923.110_and_NAPS.zip" from the
McAfee website (you may need a password from McAfee
support) to a machine on your network that can
access the WebShield appliance.

To install the WebShield HotFix, follow these
steps:

1.  Extract WSe30HF238618-923.110.zip from
    WSe30HF238618-923.110_and_NAPS.zip

2.  Open your Internet browser and browse to the
    WebShield appliance, or use the WebShield Client
    program to access the WebShield appliance.

3.  Login to the WebShield appliance when prompted
    by typing your username and password.

4.  Select "Manage Components" from the System
    menu.

5.  Use the Component Install -> "Install a selected
    HotFix or service pack file" "Browse" button, to
    find the location of the HotFix file
    "WSe30HF238618-923.110.zip" and select "Open". A
    popup window appears displaying "This operation
    requires an automatic log off which may cancel
    any changes you have made!  Do you want to
    continue?"  click "yes" button to install the
    HotFix. When the HotFix finishes installing you
    will be automatically logged out. Login again to
    continue with Step 7.

6.  Once the HotFix is installed, select "About
    WebShield" and ensure that the correct HotFix
    number is displayed.

7.  If a browser is being used to access the
    appliance configuration, close all instances of
    the browser you are using, and clear the Java
    Cache using the Java Control Panel.

NOTE:
If you plan to use the WSe30HF238618-923.110.zip
archive file again, keep it available on your
computer. Otherwise, delete the file once the HotFix
has been installed successfully. If you reinstall
your WebShield version 3.0.2/3.0.3 software, we
recommend you to reinstall the HotFix.

To install the NAPs, follow these steps:

   1. Log on to the desired ePolicy Orchestrator
      server.

   2. In the console tree under ePolicy Orchestrator
      | <SERVER>, right-click Repository, then
      select Configure Repository. The Software
      Repository Configuration wizard appears.

   3. Select Add new reports, then click Next. The
      Select a Software Package dialog box appears.

   4. Select the Software Package (.NAP) and then
      click on Open. A message saying "Software 
      repository configuration completed 
      successfully" is displayed.

REMOVING THIS RELEASE

    To remove this HotFix from your WebShield
    appliance, you need to reinstall WebShield
    appliance version 3.0.2/3.0.3. Please note that
    all other HotFixes installed on the appliance
    would also be removed in the process.
__________________________________________________________
PARTICIPATING IN THE MCAFEE BETA PROGRAM

To download new beta software or to read about the
latest beta information, visit the McAfee beta web
site located at:
       http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm

To submit beta feedback on any McAfee product, send
e-mail to:
       mcafee_beta@mcafee.com

McAfee is devoted to providing solutions based on
your input.


__________________________________________________________
CONTACT INFORMATION

SECURITY HEADQUARTERS:  AVERT
(Anti-Virus & Vulnerability Emergency Response
Team)
    Home Page
       http://www.mcafeesecurity.com/us/security/home.asp

    Virus Information Library
       http://vil.mcafeesecurity.com/

    AVERT WebImmune & Submit a Virus Sample
       https://www.webimmune.net/default.asp

    AVERT DAT Notification Service
       http://vil.mcafeesecurity.com/vil/join-DAT-list.asp


DOWNLOAD SITE
    Home Page
       http://www.mcafeesecurity.com/us/downloads/

    Anti-Virus DAT File and Engine Updates
       http://www.mcafeesecurity.com/us/downloads/updates/

       ftp://ftp.mcafee.com/pub/antivirus/datfiles/4.x

    Anti-Spam Rules File and Engine Updates
       ftp://ftp.nai.com/spamdefs/1.x/

    Product Upgrades
       https://secure.nai.com/us/forms/downloads/upgrades/login.asp

    Valid grant number required (contact Customer
    Service)


TECHNICAL SUPPORT
    Home Page
       http://www.mcafeesecurity.com/us/support/technical_support

    KnowledgeBase Search
       https://knowledgemap.mcafeesecurity.com/phpclient/homepage.aspx

    PrimeSupport Service Portal (Logon credentials
    required)
       https://mysupport.mcafeesecurity.com

    PSVANS PrimeSupport Vulnerability Alert
    Notification Service
       http://www.mcafeesecurity.com/us/support/primesupport/


CUSTOMER SERVICE
    US, Canada, and Latin America toll-free:
   Phone:     +1-888-VIRUS NO or +1-888-847-8766
              Monday-Friday, 8am-8pm, Central Time

   E-mail:    https://secure.nai.com/us/forms/support/request_form.asp

   Web:       http://www.mcafeesecurity.com/us/support/default.asp


MCAFEE BETA PROGRAM
    Download Site:
       http://www.mcafeesecurity.com/us/downloads/beta/mcafeebetahome.htm

    E-mail to Submit Beta Feedback:
       mcafee_beta@mcafee.com


TRAINING: MCAFEE UNIVERSITY
       http://www.mcafeesecurity.com/us/services/education/mcafee/university.htm


WORLDWIDE OFFICES
    For addresses and phone numbers of worldwide
    offices:

       http://www.mcafeesecurity.com/us/contact/home.htm


_____________________________________________________
COPYRIGHT AND TRADEMARK ATTRIBUTIONS

Copyright (C) 2005 McAfee, Inc. All Rights Reserved.
No part of this publication may be reproduced,
transmitted, transcribed, stored in a retrieval
system, or translated into any language in any form
orbyany means without the written permission of
McAfee, Inc., or its suppliers or affiliate
companies.


TRADEMARKS

ACTIVE FIREWALL, ACTIVE SECURITY, ACTIVESECURITY
(AND IN KATAKANA), ACTIVESHIELD, CLEAN-UP, DESIGN
(STYLIZED E), DESIGN (STYLIZED N), ENTERCEPT,
EPOLICY ORCHESTRATOR,  FIRST AID, GROUPSHIELD,
GROUPSHIELD (AND IN KATAKANA),  INTRUSHIELD,
INTRUSION PREVENTION THROUGH INNOVATION,  MCAFEE,
MCAFEE (AND IN KATAKANA), MCAFEE AND DESIGN,
MCAFEE.COM, MCAFEE VIRUSSCAN, NA NETWORK ASSOCIATES,
NET TOOLS, NET TOOLS (AND IN KATAKANA), NETSCAN,
NETSHIELD, NETWORK ASSOCIATES, NUTS & BOLTS, OIL
CHANGE, PRIMESUPPORT, SPAMKILLER, THREATSCAN, TOTAL
VIRUS DEFENSE, VIREX, VIRUS FORUM, VIRUSCAN,
VIRUSSCAN, VIRUSSCAN (AND IN KATAKANA), WEBSCAN,
WEBSHIELD, WEBSHIELD (AND IN KATAKANA), YOUR
NETWORK. OUR BUSINESS.  are registered trademarks or
trademarks of McAfee, Inc. and/or its affiliates in
the US and/or other countries.  The color red in
connection with security is distinctive of McAfee
brand products.  All other registered and
unregistered trademarks herein are the sole property
of their respective owners.



_____________________________________________________
LICENSE INFORMATION

LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE
LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU
PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND
CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF
YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE
ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED
LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU HAVE
RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A
BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE
AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED
THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF
THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL
THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE
PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A
FULL REFUND.


LICENSE ATTRIBUTIONS

This product includes or may include:
*Software developed by the OpenSSL Project for use
in the OpenSSL Toolkit (http://www.openssl.org/).
*Cryptographic software written by Eric A. Young
and software written by Tim J. Hudson. *Some
software programs that are licensed (or sublicensed)
to the user under the GNU General Public License
(GPL) or other similar Free Software licenses which,
among other rights, permit the user to copy, modify
and redistribute certain programs, or portions
thereof, and have access to the source code. The GPL
requires that for any software covered under the GPL
which is distributed to someone in an executable
binary format, that the source code also be made
available to those users. For any such software
covered under the GPL, the source code is made
available on this CD. If any Free Software licenses
require that McAfee provide rights to use, copy or
modify a software program that are broader than the
rights granted in this agreement, then such rights
shall take precedence over the rights and
restrictions herein.  *Software originally written
by Henry Spencer, Copyright 1992, 1993, 1994, 1997
Henry Spencer.  *Software originally written by
Robert Nordier, Copyright (C)1996-7 Robert Nordier.
*Software written by Douglas W. Sauder.  *Software
developed by the Apache Software Foundation
(http://www.apache.org/). A copy of the license
agreement for this software can be found at
www.apache.org/licenses/LICENSE-2.0.txt.
*International Components for Unicode ("ICU")
Copyright (C)1995-2002 International Business
Machines Corporation and others.  *Software
developed by CrystalClear Software, Inc., Copyright
(C)2000 CrystalClear Software, Inc. *FEAD(R)
Optimizer(R) technology, Copyright Netopsystems AG,
Berlin, Germany. *Outside In(R) Viewer Technology
(C)1992-2001 Stellent Chicago, Inc. and/or Outside
In(R) HTML Export, (C)2001 Stellent Chicago, Inc.
*Software copyrighted by Thai Open Source Software
Center Ltd. and Clark Cooper, (C)1998, 1999, 2000.
*Software copyrighted by Expat maintainers.
*Software copyrighted by The Regents of the
University of California, (C)1989.  *Software
copyrighted by Gunnar Ritter.  *Software
copyrighted by Sun Microsystems(R), Inc. (C)2003.
*Software copyrighted by Gisle Aas. (C)1995-2003.
*Software copyrighted by Michael A. Chase,
(C)1999-2000.  *Software copyrighted by Neil
Winton, (C)1995-1996.  *Software copyrighted by
RSA Data Security, Inc., (C)1990-1992.  *Software
copyrighted by Sean M. Burke, (C)1999, 2000.
*Software copyrighted by Martijn Koster, (C)1995.
*Software copyrighted by Brad Appleton,
(C)1996-1999.  *Software copyrighted by Michael G.
Schwern, (C)2001.  *Software copyrighted by Graham
Barr, (C)1998.  *Software copyrighted by Larry
Wall and Clark Cooper, (C)1998-2000.  *Software
copyrighted by Frodo Looijaard, (C)1997.
*Software copyrighted by the Python Software
Foundation, Copyright (C)2001, 2002, 2003. A copy
of the license agreement for this software can be
found at www.python.org.  *Software copyrighted by
Beman Dawes, (C)1994-1999, 2002.  *Software
written by Andrew Lumsdaine, Lie-Quan Lee, Jeremy G.
Siek (C)1997-2000 University of Notre Dame.
*Software copyrighted by Simone Bordet & Marco
Cravero, (C)2002.  *Software copyrighted by
Stephen Purcell, (C)2001.  *Software developed by
the Indiana University Extreme! Lab
http://www.extreme.indiana.edu/).  *Software
copyrighted by International Business Machines
Corporation and others, (C)1995-2003.  *Software
developed by the University of California, Berkeley
and its contributors.  *Software developed by Ralf
S. Engelschall <rse@engelschall.com> for use in the
mod_ssl project (http://www.modssl.org/).
*Software copyrighted by Kevlin Henney,
(C)2000-2002.  *Software copyrighted by Peter
Dimov and Multi Media Ltd. (C)2001, 2002.
*Software copyrighted by David Abrahams, (C)2001,
2002. See http://www.boost.org/libs/bind/ bind.html
for documentation.  *Software copyrighted by Steve
Cleary, Beman Dawes, Howard Hinnant & John Maddock,
(C)2000.  *Software copyrighted by Boost.org,
(C)1999-2002.  *Software copyrighted by Nicolai M.
Josuttis, (C)1999.  *Software copyrighted by
Jeremy Siek, (C)1999-2001.  *Software copyrighted
by Daryle Walker, (C)2001.  *Software copyrighted
by Chuck Allison and Jeremy Siek, (C)2001, 2002.
*Software copyrighted by Samuel Krempp, (C)2001.
See http://www.boost.org for updates, documentation,
and revision history.  *Software copyrighted by
Doug Gregor (gregod@cs.rpi.edu), (C)2001, 2002.
*Software copyrighted by Cadenza New Zealand Ltd.,
(C)2000.  *Software copyrighted by Jens Maurer,
(C)2000, 2001.  *Software copyrighted by Jaakko
Jrvi (jaakko.jarvi@cs.utu.fi), (C)1999, 2000.
*Software copyrighted by Ronald Garcia, (C)2002.
*Software copyrighted by David Abrahams, Jeremy
Siek, and Daryle Walker, (C)1999-2001.  *Software
copyrighted by Stephen Cleary (shammah@voyager.net),
(C)2000.  *Software copyrighted by Housemarque Oy
<http:// www.housemarque.com>,(C)2001.  *Software
copyrighted by Paul Moore, (C)1999.  *Software
copyrighted by Dr. John Maddock, (C)1998-2002.
*Software copyrighted by Greg Colvin and Beman
Dawes, (C)1998, 1999.  *Software copyrighted by
Peter Dimov, (C)2001, 2002.  *Software copyrighted
by Jeremy Siek and John R. Bandela, (C)2001.
*Software copyrighted by Joerg Walter and Mathias
Koch, (C)2000-2002.



V3.1.2






