Microsoft has released Hotfix Rollup 2 for Forefront Security for Office Communications Server. This article contains information about how to obtain the hotfix rollup and about the issues that are fixed by the hotfix rollup.
1.) Forefront Security for Office Communications Server Hotfix Rollup 2 provides version 8 of the Kaspersky scan engine by default upon install.
2.) Additional logging added to Programlog in verbose mode when Forefront tags an instant message as invalid due to Sender/Recipient address.
When Forefront Security for OCS scans an instant message that it deems as invalid due to the Sender or Recipient address, it will now add additional logging to the ProgramLog. This logging will occur when diagnostics are set to verbose mode. This logging will provide additional insight into Forefront's scan results
The following entries will now be seen in the ProgramLog:
"Request Invalid: No Sender Address or Display Name "User Display Name." "Request Invalid: No Recipient Address or Display Name "User Display Name."
Issues that are fixed in Hotfix Rollup 1 for Forefront Security for Office Communications Server
Details of the issues that are fixed in the hotfix rollup
Sender receives error “400 Request is invalid; missing required data” when replying to an instant message ISSUE
When Forefront Security for OCS receives an instant message to scan it will validate the message it is receiving to confirm it is formatted correctly. Among the checks it performs is validating the sender and recipient. When it validates the sender and recipient it parses the addresses in the header of the instant message. A typical address might look like:
“John Doe” <sip:John.Doe@contoso.com> or simply, sip:John.Doe@contoso.com
The routine that parses the IM address expects that if angle brackets: ‘<’ and ‘>’ are present, then the value between them will contain the IM address. If the address contains additional angle brackets, such as: “John Doe <TEAM>” <sip:John.Doe@contoso.com> the code will return <TEAM> as the IM address. When this value is used later in the code, it is found to be invalid.
The recipient cannot reply to the original sender and instead receives the following error:
Request is invalid; missing required data
The FSOCS parser does not expect, nor can it parse, multiple bracketed data sets.
You cannot upgrade FSOCS on any other drive except the system drive
Forefront Security for OCS will not upgrade to a rollup on a drive that is not the system drive.
The follow error will pop up during the attempted upgrade:
The Forefront Security for OCS installer does not look at the registry to check to see where it is currently installed. It only looks for the system drive.
Hotfix rollup information
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
How to install the hotfix rollup
To install the hotfix rollup, follow these steps:
Run the installer. To do this, double-click the hotfix rollup executable file.
Note When the installer is running, the Forefront services are stopped.
After the installation is complete, and the Forefront services are restarted, make sure that Forefront is working correctly.
Note The Forefront services are restarted automatically during the installation.
This hotfix rollup requires that Forefront Security for Office Communications Server is installed.
This hotfix may not contain all the files that you must have to fully update a product to the latest build. This hotfix contains only the files that you must have to correct the issues that are listed in this article.
The English (United States) version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.