Description of Hotfix Rollup 4 for Forefront Security for Office Communications Server

Article translations Article translations
Article ID: 2694730 - View products that this article applies to.
Expand all | Collapse all

On This Page

SUMMARY

Microsoft has released Hotfix Rollup 4 for Forefront Security for Office Communications Server. This article contains a description of the hotfix rollup as well as information about how to obtain the hotfix rollup.

Features of the hotfix rollup

Hotfix Rollup 4 allows FSOCS to be installed on Lync 2010 (running on Windows 2008 R2 or Windows 2008 SP2 x64) in addition to Office Communications Server 2007 and Office Communications Server 2007 R2.  As the feature set and patch level are the same as RU3, customers who have already deployed RU3 can update but are not required to do so.

Important Notes

1.)  File Transfer Scanning and Filtering Limitations:

Lync 2010 clients are capable of performing peer-to-peer as well as group file transfers. Forefront is able to scan and filter file transfers only when 2 participants are involved. When 3 or more participants are involved in the conversation, file transfers are exchanged using a conferencing role that Forefront does not protect. In this scenario, files will not be scanned or filtered by Forefront.

The Lync 2010 client added additional functionality (ICE, TURN, STUN) to overcome previous limitations in which attempts to create a direct connection between peers failed due to firewall issues such as clients sitting behind a NAT. Lync also changed the protocol for peer to peer file transfers from using FTP in 2007 / 2007 R2 to using RTP. With Forefront installed, Lync clients can be expected to use the earlier client behavior with respect to establishing connections as well as the use of FTP.

2.) Forefront for OCS can be installed on the Front End, Edge, and Director Roles on OCS 2007 and OCS 2007 R2 and on the Front End and Edge roles on Lync 2010. Installation on the Edge and Director Roles enables Forefront to offload some scanning from the Front End role to these other roles.

3.) There are several important notes specifically related to installing on the Edge role on Lync 2010:

- On the FSOCS setup panel “Notification Account Setup”, you must provide the fully qualified domain name of the SIP URI user account that will be used to login to the Front End box.

- You must select Transport type TLS and not TCP.

- Note: If the two settings above are not done correctly during install, the Forefront logs will show errors with attempting to log in. This can be corrected after installation by making changes in the Forefront Administrative console under “General Settings\IM Notification Agent”.

- After installing on the Edge role, you MUST register the Forefront deployment with the Front End in order for it to work.

- To register it, you must know the fully qualified domain name of the Edge server as in myedgeserver.mydomain.com. You must then run the following command from a Lync PowerShell prompt on the Front End server:
New-CsServerApplication -Identity "Service:<FQDN of Edge Server>/ForeFrontRTCProxy" -Uri "http://www.microsoft.com/ForefrontServerSecurity/ForefrontRTCProxy" -Enabled $True -Critical $True

- After uninstalling from an Edge role, you MUST unregister the Forefront deployment with the Front End by running the following command from a Lync PowerShell prompt on the Front End server:
Remove-CsServerApplication –IdentityService:EdgeServer:<myedgeserver.mydomain.com>/ForefrontRTCProxy

- After you run either of the commands above to register or unregister, you can verify that the registration is present or removed by either looking for the Forefront Edge server registration in PowerShell using the command Get-CsServerApplication or from the Lync Server Control Panel.

Known Issues

Installation and uninstallation on Lync 2010 Edge role requires that some specific steps be followed including manual registration with the Front End. (see "Important Notes" #3 above)

There are some known File Transfer Scanning and Filtering Limitations when used with Lync 2010 (see "Important Notes" #1 above)

Download information

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

How to install the hotfix rollup

To install the hotfix rollup, follow these steps:
  1. Run the installer. To do this, double-click the hotfix rollup executable file.

    Note When the installer is running, the Forefront services are stopped.
  2. After the installation is complete, and the Forefront services are restarted, make sure that Forefront is working correctly.

    Notes
    • The Forefront services are restarted automatically during the installation.

Prerequisites

The minimum server requirements for FSOCS RU4+ are the same as the corresponding OCS 2007, 2007 R2, or Lync 2010 minimum requirements on which FSOCS is installed. At the time of this writing they are:

 - For Lync 2010: (64 bit only) 2008 R2, 2008 SP2

 - For OCS 2007 R2: (64 bit only) Windows 2008, Windows 2003 R2 SP2, Windows 2003 SP2

 - For OCS 2007: (2003 SP1+)

Microsoft Office Communications Server Standard Edition, or, Enterprise Edition with one of the following server roles configured: Front End, Access Edge, Director.

1 gigabyte (GB) of free memory, in addition to that required to run OCS (2 GB recommended). NOTE: with each additional scan engine used, more memory is needed for each scanning process.

2 GB of available disk space. This is in addition to the disk space required for Microsoft OCS.

Intel processor (1 GHz)   


File information

This hotfix may not contain all the files that you must have to fully update a product to the latest build. This hotfix contains only the files that you must have to correct the issues that are listed in this article.

The English (United States) version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Adonavigator.dll10.2.732.0422,19213-Mar-201216:26x86
Custominstall.dll10.2.732.0877,87213-Mar-201216:26x86
Dcomperm.exeNot Applicable83,68813-Mar-201216:23x86
Eula.rtfNot Applicable2,74704-Nov-201123:31Not Applicable
Eventstrings-en_us.dll10.2.732.0129,84013-Mar-201216:26x86
Eventstrings.dll10.2.732.0129,84013-Mar-201216:26x86
Extractfiles.exe10.2.732.0336,68813-Mar-201216:26x86
Filterengine.dll10.2.732.0331,56813-Mar-201216:26x86
Forefrontnotificationagent.exe10.2.732.035,63213-Mar-201216:26x86
Forefrontnotificationagent.exe.manifestNot Applicable87004-Nov-201123:31Not Applicable
Forefrontrtcproxy.exe10.2.732.0102,40013-Mar-201216:19x86
Forefrontrtcproxy.exe.configNot Applicable9504-Nov-201123:31Not Applicable
Forefrontrtcproxy64.exe10.2.732.0102,40013-Mar-201216:19x86
Forefrontrtcproxy64.exe.configNot Applicable9504-Nov-201123:31Not Applicable
Forefrontrtcproxylync.exe10.2.732.0102,40013-Mar-201216:19x86
Forefrontrtcproxylync.exe.configNot Applicable9504-Nov-201123:31Not Applicable
Fscadmarksvc.exe10.2.732.093,41613-Mar-201216:22x86
Fsccodec.dll10.2.732.0195,88813-Mar-201216:26x86
Fsccommon.dll10.2.732.019,76013-Mar-201216:26x86
Fsccontroller.exe10.2.732.01,542,96013-Mar-201216:26x86
Fsccontrollerps.dll10.2.732.085,80813-Mar-201216:26x86
Fsccontrollerps64.dll10.2.732.0102,12013-Mar-201216:08x64
Fsccontroller_net_wrapper.dll10.2.732.039,72813-Mar-201216:26x86
Fscdiag.exe10.2.732.0512,30413-Mar-201216:26x86
Fscperfmonitor64.dll10.2.732.0534,32013-Mar-201216:32x64
Fscreg.cfgNot Applicable14,55404-Nov-201123:30Not Applicable
Fscstarter.exe10.2.732.0245,04013-Mar-201216:26x86
Fscstatsserv.exe10.2.732.0271,66413-Mar-201216:26x86
Fscutility.exe10.2.732.0501,04013-Mar-201216:26x86
Fsemailpickup.exe10.2.732.0162,60813-Mar-201216:26x86
Fsocagent.dll10.2.732.039,72813-Mar-201216:26x86
Fsocscanner.exe10.2.732.0768,30413-Mar-201216:26x86
Fsoperf.hNot Applicable89304-Nov-201123:30Not Applicable
Fsoperf.iniNot Applicable6,88804-Nov-201123:30Not Applicable
Fssaclient.exe10.2.732.01,200,94413-Mar-201216:26x86
Getenginefiles.exe10.2.732.0679,21613-Mar-201216:26x86
Gziparchive.dll10.2.732.0266,03213-Mar-201216:26x86
Installservice.exe10.2.732.049,96813-Mar-201216:26x86
Installtask.exe10.2.732.0226,60813-Mar-201216:26x86
Installutil.dll.configNot Applicable11,22504-Nov-201123:31Not Applicable
Keywordinstaller.msiNot Applicable390,65613-Mar-201216:23Not Applicable
Languageconfig.xmlNot Applicable8913-Mar-201216:55Not Applicable
Launcher.exe10.2.732.0214,32013-Mar-201216:26x86
License.cfgNot Applicable10,84004-Nov-201123:31Not Applicable
License.rtfNot Applicable150,34604-Nov-201123:31Not Applicable
License_rules.cfgNot Applicable13,17204-Nov-201123:31Not Applicable
Macbinnavigator.dll10.2.732.0238,89613-Mar-201216:26x86
Microsoft.fso.common.dll10.2.732.0121,64813-Mar-201216:26x86
Microsoft.fso.diagnostics.dll10.2.732.056,11213-Mar-201216:26x86
Microsoft.fso.imclient.dll10.2.732.056,11213-Mar-201216:26x86
Microsoft.fso.installationhelper.dll10.2.732.080,68813-Mar-201216:26x86
Microsoft.fso.performancecounters.dll10.2.732.039,72813-Mar-201216:26x86
Microsoft.fso.registryaccess.dll10.2.732.043,82413-Mar-201216:26x86
Microsoft.office.interop.uccapi.dll2.0.6362.15320,56004-Nov-201123:31x86
Mimenavigator.dll10.2.732.0322,35213-Mar-201216:26x86
Multimapper.dll10.2.732.0201,52013-Mar-201216:26x86
Networkinterfaceselector.exe10.2.732.017,20013-Mar-201216:26x86
Openxmlnavigator.dll10.2.732.0251,18413-Mar-201216:26x86
Perfmonitorsetup.exe10.2.732.0290,60813-Mar-201216:26x86
Pidgen.dll5.2.3790.266030,91204-Nov-201123:31x86
Productconfig.xmlNot Applicable72804-Nov-201123:31Not Applicable
Programlogmsg.dll10.2.732.0112,43213-Mar-201216:26x86
Rarnavigator.dll10.2.732.0332,08013-Mar-201216:26x86
Remotinglayer.dll10.2.732.083,24813-Mar-201216:26x86
Rtmpltfm.dll3.0.6362.105,322,24004-Nov-201123:31x86
Scanengines.dll10.2.732.052,52813-Mar-201216:26x86
Scanenginetest.exe10.2.732.0315,69613-Mar-201216:26x86
Smimenavigator.dll10.2.732.0235,82413-Mar-201216:26x86
Statistics.configNot Applicable2,85304-Nov-201123:29Not Applicable
Statisticsmanager.dll10.2.732.0538,41613-Mar-201216:26x86
Structstgnavigator.dll10.2.732.0299,31213-Mar-201216:26x86
Tararchive.dll10.2.732.0248,11213-Mar-201216:26x86
Tnefnavigator.dll10.2.732.0305,96813-Mar-201216:26x86
Uccapi.dll2.0.6362.153,424,25604-Nov-201123:31x86
Uccapires.dll2.0.6362.15636,93604-Nov-201123:31x86
Uuencodenavigator.dll10.2.732.0255,28013-Mar-201216:26x86
Version.exe10.2.732.0310,57613-Mar-201216:26x86
Xmlconfigim.xmlNot Applicable4,03604-Nov-201123:31Not Applicable
Ziparchive.dll10.2.732.0302,38413-Mar-201216:26x86
Localenginemapping.cabNot Applicable6,39904-Nov-201123:31Not Applicable
Avemicrosoft.dll1.0.201.0447,76002-Mar-201220:15x86
Manifest.cabNot Applicable8,27213-Mar-201216:54Not Applicable
Mpavbase.vdm1.121.0.044,004,03220-Feb-201208:05Not Applicable
Mpavdlta.vdm1.121.1437.02,473,66413-Mar-201206:53Not Applicable
Mpengine.dll1.1.8101.06,552,12020-Feb-201208:05x86
Manifest.cabNot Applicable10,38304-Nov-201123:31Not Applicable
Wormprge.datNot Applicable22,72204-Nov-201123:31Not Applicable
Extractfiles.dll.mui10.2.732.053,55213-Mar-201216:26Not Applicable
Forefrontserver.chmNot Applicable259,87604-Nov-201123:31Not Applicable
Fscdiag.dll.mui10.2.732.060,72013-Mar-201216:26Not Applicable
Fscutility.dll.mui10.2.732.066,35213-Mar-201216:26Not Applicable
Fssaclient.dll.mui10.2.732.0360,75213-Mar-201216:26Not Applicable
Getenginefiles.dll.mui10.2.732.055,08813-Mar-201216:26Not Applicable
Resourcestrings.dll.mui10.2.732.0119,08813-Mar-201216:26Not Applicable

Properties

Article ID: 2694730 - Last Review: March 28, 2012 - Revision: 1.0
APPLIES TO
  • Microsoft Forefront Security for Office Communications Server
  • Microsoft Lync 2010
Keywords: 
kbautohotfix KB2694730

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com