I am attempting to centrally manage Red Hat 6.10 firewall rules with a 5.9.1 ePO server. I have installed McAfee Endpoint Security Firewall for Linux 10.6.3 on the Red Hat machine. The McAfee agent and Endpoint Security Threat Prevention are communicating with the ePO. However, I cannot get the Red Hat machine to pull the firewall policies that I have created in ePO. Any idea what I am missing? I cannot seem to find any documentation on this process, so I am going into this blind. Where are the base McAfee firewall rules being pulled from?
starting point will be to look at the McAfee Endpoint Security for Linux License Extension
version. have you upgraded the extension to 10.6.3 or later?
Can you please let me know how exactly you are finding that policies not enforced properly?
The log shows "Failed to get license from McAfee agent. Setting license status as paid". "Received registration acknowledgement from ESP".
Where can I find the licensing information in ePO or on the host itself?
When I run mfw on the local Red Hat machine, I get the default McAfee policies. However, the policies that I created under the rules tab do not propagate to endpoints like the Windows ones do. I can manually create local policies on the Red Hat machine though.
This is very old error. https://kc.mcafee.com/corporate/index?page=content&id=KB88495
Can you follow the workaround mentioned in the article and confirm the state?
Do you see proper agent to server communication from that machine?
I followed the steps in the workaround. I am now seeing the following output:
INFO TpAgentAdaptor  McAfee Agent is running with mode: 1 (0-Unmanaged, 1-ePO Managed, 2-ePO Cloud Managed, 3-Unknown)
INFO Preference  Product is using a valid license.
INFO ScanFactoryBroker  Starting Scan Factory before starting the OAS Scan Manager
The McAfee agent is communicating regularly with the ePO server. Threat Prevention virus-definitions are even updating automatically. However, anytime I attempt to run a client task, I get the following error message:
Run client task message expired
The firewall still will not pull its policies and settings from the ePO server.
My agents are running version 126.96.36.199. My organization only provides access to this version and earlier releases. I am not seeing 188.8.131.52 on our repository. Is there a location that I can download it directly from McAfee?
Hi @mgran2019 Products can be downloaded from the McAfee Download Grant site (https://www.mcafee.com/content/enterprise/en-us/downloads/my-products/downloads.html) if you have your Support grant number, or from the ePO Server Software Manager.