cancel
Showing results for 
Search instead for 
Did you mean: 
avilt
Level 7

Solidcore 8.0.0.651 no events in Observation Mode

I have Solidcore 8.0.0.651 deployed from ePO 5.3 on Windows. When I put the client in Enable mode I can see the events under Threat Event Log but in Observe mode I cannot see any events under policy discovery or anywhere.

Please advise.

0 Kudos
3 Replies
wouterr
Level 10

Re: Solidcore 8.0.0.651 no events in Observation Mode

What version of windows are you using? we had a similar case with McAfee support and apparently the "script as updater" is not available on all windows versions.

As quoted from the appcontrol 8 product guide and our support ticket:

This feature is not applicable for the Windows 8, Windows Embedded 8, Windows 8.1, Windows Embedded 8.1, Windows 10, Windows Embedded 10, Windows Server 2012, and Windows Server 2012 R2 platforms and Application Control 8.

0 Kudos
avilt
Level 7

Re: Solidcore 8.0.0.651 no events in Observation Mode

I was testing this with simple batch scripts, to show up events, the script should update the system. It's a normal bahaviour.

0 Kudos
wouterr
Level 10

Re: Solidcore 8.0.0.651 no events in Observation Mode

Hi,

sorry my reply was actually related to your other question ( )

As for obserervation events not always getting send towards the ePo server. we experience the same issue and is currently under investigation.

0 Kudos