McAfee Agent deployment to clients on the VPN

[cainapp]

Hello,

we started deploying McAfee Agent 4.8 to our remote users after deploying it to our local users. We noticed that when we deploy the Agent to a remote machine connected to VPN, That machine would some times disappear from ePO System Tree and there are times when duplicate names for the same machine show in ePO....

will ePO updates itself automatically when the client connects from the office locally through LAN?

What about clients that are always remote and on the VPN all the time?

What are your recommendations to fix this issue ,

Thank you

[SafeBoot]

It sounds like your EPO team don't have VNP exclusions set up for the McAfee Agent?

[cainapp]

I ran a report on the managed system with same Mac Address and found 4 had the same MAC which starts with '00059a' (Cisco MAC) and then 2 had the same MAC but ePO didn't list the MAC for them it showed them as blank. we have two VPN concentrator, the MAC showing on the 4 systems is for the old VPN , the new one isn't showing but i can check with the network engineer ? Do you know why ePO won't show the MAC on the other two? I want to know it so i can exclude it.

How do we add exclusions? Thank you for the KB,

I found the following

https://kc.mcafee.com/corporate/index?page=content&id=KB52949

https://kc.mcafee.com/corporate/index?page=content&id=KB51588

Do I need to install SQL Management studio 2008 on the server to run the sql commands. Rbdudani, how did you do it ?

Thank you for your time and help

[alexn · Accepted solution]

will ePO updates itself automatically when the client connects from the office locally through LAN?

Yes, ePo will generate new GUID once it will find new MAC.

What about clients that are always remote and on the VPN all the time?

YOu are very right to follow this KB for above query.

https://kc.mcafee.com/corporate/index?page=content&id=KB52949

Thanks

Alexn

[rbdudani]

we too faced issue with VPN users and finally found that , its MAC address (VPN MAC address) causing, and there is good KB on kc.mcafee.com

which talks about how to exclude perticular IP, so that ePO will not consider that MAC address as new MAC address

we follow this KB as sugguested by mcafee support

https://kc.mcafee.com/corporate/index?page=content&id=KB52949

[cainapp]

Thank you all

I've added the MAC address of the Old VPN to the database.

only issue remaining is , those two machines on the New VPN that don't show any MAC address to exclude. Any ideas why ; I'll check with our network engineer on the MAC but if I exclude it and ePO isn't seeing any MAC on the client would that work

Thanks again

[rbdudani]

Just delete 2 machine and sychronize

New entry wilk have all information