ENS Threat Prevention policies disappeared

[ArchieScorgie]

All my custom created policies for ENS Threat Prevention disappeared.  I restarted both ePO server and its database server, but they are still gone.  ENS ATP, Firewall and Web Control; custom policies are still intact.  I'm using ENS 10.6.1.

[User58617863]

Hi Sir Archie,

Have you deleted the ENS TP extension in your ePO server?

That maybe the reason of it.

-Raven

[ArchieScorgie]

Hi, no, the extension is still checked-in and running.

[ArchieScorgie]

The default McAfee policies for TP is still available, but the policies that I created, are gone.

[ArchieScorgie]

[User58617863]

Do you have backup of your policies? I would suggest importing the backed up .xml files. It seems your policies cannot be seen anymore. Try opening a ticket to support for the root cause.

[ArchieScorgie]

Do you perhaps know in which table/s the policeies are been stored in the database?

[Former Member]

Hi @ArchieScorgie 

Have you tried reviewing the Audit Log of ePO to see who or what removed the extensions?

[ArchieScorgie]

Hi, yes, but there is no trace of it been removed.  I did log a SR with McAfee to investigate.