Trend Micro OfficeScan Changelog

What's new in Trend Micro OfficeScan 11.0.1028

• SUSPICIOUS FILE RESTORATION:
• OfficeScan provides administrators the ability to restore previously detected "suspicious" files and add files to domain-level "approved" lists to prevent further actions on the files.
• If a program or file has been detected and quarantined, administrators can globally or granularly restore the file on agents. Administrators can use additional SHA1 verification checking to ensure that the files to be restored have not been modified in any way. After restoring the files, OfficeScan can automatically add the files to domain-level exclusion lists to exempt them from further scanning.
• ADVANCED PROTECTION SERVICE:
• The Advanced Protection Service provides the following new scan features.
• Browser Exploit Prevention:
• Browser Exploit Prevention uses sandbox technology to test the behavior of web pages in real time and detect any malicious script or program before the OfficeScan agent is exposed to threats
• Enhanced Memory Scanning:
• Enhanced memory scanning works in conjunction with Behavior Monitoring to detect malware variants during Realtime Scans and take quarantine actions against threats.
• DATA PROTECTION ENHANCEMENTS:
• OfficeScan Data Protection has been enhanced to provide the following benefits:
• Data Discovery through integration with Control Manager: Administrators can configure Data Loss Prevention policies on Control Manager to scan folders on OfficeScan agents for sensitive files. After discovering sensitive data within a file, Control Manager can log the location of the file or, through integration with Trend Micro Endpoint Encryption, automatically encrypt the file on the OfficeScan agent.
• User Justification support: Administrators can allow users to provide reasons for transferring sensitive data or block the transmissions themselves. OfficeScan logs all transfer attempts and the reasons provided by the user.
• Smartphone and tablet support: Data Loss Prevention and Device Control can now monitor and take action on sensitive data being sent to smart devices, or block access to smart devices entirely.
• SUSPICIOUS CONNECTION SETTINGS ENHANCEMENTS:
• Command & Control (C&C) Contact Alert Services has been updated to include the following:
• Global User-defined Approved and Blocked IP lists
• Malware network fingerprinting to detect C&C callbacks
• Granular action configuration when suspicious connections
• are detected
• C&C server and agent logs record the process responsible for
• C&C callbacks
• OUTBREAK PREVENTION ENHANCEMENTS:
• Outbreak Prevention has been updated to protect against the following: Executable compressed files, Mutex processes.
• SELF-PROTECTION FEATURE ENHANCEMENTS:
• The self-protection features available in this release provide both light-weight and high level security solutions to protect both your server and OfficeScan agent programs.
• Light-weight solution: Designed for server platforms to protect OfficeScan agent process and registry keys by default, without affecting the performance of the server
• High-level security solution: Enhances the Agent Self-protection feature available in previous releases by providing:
• IPC command authentication
• Pattern file protection and verification
• Pattern file update protection
• Behavior Monitoring process protection
• SCAN PERFORMANCE AND DETECTION ENHANCEMENTS:
• Real-Time Scan maintains a persistent scan cache which reloads each time the OfficeScan agent starts. The OfficeScan agent tracks any changes to files or folders that occurred since the OfficeScan agent unloaded and removes these files from the cache.
• This version of OfficeScan includes global Approved lists for Windows system files, digitally signed files from reputable sources, and Trend Micro-tested files. After verifying that a file is known to be safe, OfficeScan does not perform any action on the file.
• Damage Cleanup Services enhancements provide improved detection capabilities for rootkit threats and a reduced number of false positives through updated GeneriClean scanning.
• Compressed file settings are separated between Real-time and On-demand Scans to help improve performance.
• Dual-layer logs provide a more detailed view for detections that administrators want to examine further.
• OFFICESCAN AGENT INTERFACE REDESIGN:
• The OfficeScan agent interface has been redesigned to provide an easier, more streamlined, and more modern experience. All the features available in the previous OfficeScan client program are still available in the updated version.
• The updated interface also allows administrators to "unlock" administrative functions directly from the OfficeScan agent console in order to quickly troubleshoot issues without opening the web console.