Here are some of the enhancements and the fixes included in this patch. For the complete list, please refer to the readme file:
Session ID Generation
This patch enables SMEX to generate longer session IDs using a combination of letters, numbers, and characters to help protect against brute force attacks.
Main Console
This patch enables the "Server Management" page of the SMEX console to display and respond faster.
Quarantined Email Messages
In SMEX, you can resend quarantined email messages only as attachments in new messages. This patch allows you to resend the original versions of quarantined email messages.
VSAPI Engine
This patch ensures that when the VSAPI engine detects a "HEUR_" or "EXPL_" virus file that does not trigger Advanced Threat Scan Engine (ATSE) rules, SMEX sends the file to Trend Micro Deep Discovery Analyzer for further analysis.
Virus Scans
This patch enables you to set whether SMEX should back up infected encrypted and password-protected files during virus scans when the action for these types of files is set to "Pass" and the "backup infected file" option is enabled for virus scans.
Administrator Privileges
This patch adds an option to prevent local and domain administrators from logging on to the SMEX web console.
Pattern and Engine Updates
This patch enables SMEX to update pattern and engine files through the HTTPS server when it is set to use "Trend Micro Active Update Server" as download source.
ATSE Rules
This patch enables you to enable the "HEUR_HAS_MACRO" ATSE rule which is used to detect if an email file attachment contains macros. You will also be able to set the "Pass" action for these email messages if these email messages are not analyzed or cannot be analyzed successfully by the Deep Discovery Advisor server. This helps reduce the number of false positive detections by the ATSE.
DLP Filter Templates
This patch adds several new templates definitions for the Trend Micro Data Loss Prevention (DLP) filter and allows you to configure the DLP filter in SMEX to merge cells in Microsoft Excel spreadsheets during content-matching.
Trend Micro recommends that you apply this patch on SMEX11 SP1. If you have applied a hotfix with build number above 4255, this hotfix needs to be re-applied after installing this patch.