Hi! Im on ePo 5.10, with agent 5.6 and yesterday update some extensions (endpoint security platform, endpoint security threat prevention). All was working find and suddenly, i get a pop up with a message telling me that I dont have any active antivirus. When i check my agent, i see the mcafee icon with an exclamation and with "a problem is detected". When i check it, i can see "Problem: Real time scanning not respond. Problem: Exploit prevention is disabled. Problem: Scriptscan is disabled."
So i check the configuration and on endpoint security and find that, inside threat prevention, scriptscan and exploits prevention are enabled although it said that was disabled and in real time scan i see "Error to load configuration".
I try uninstalling the new extensions, installing the former and reinstalling the agent but i still getting the same error on all the machines with epo agent.
What version of product do you have installed on the endpoints? Did you upgrade the endpoints or just the extensions in ePO? If you updated the products were the endpoints rebooted since then?
Mcafee Agent 5.61.157
Endpoint Security 10.6
Endpoint Security Platform 10.6.1.1124 with hotfix 190212
Endpoint Security Threat Prevention 10.6.1 1208 with hotfix 190212
Endpoint Security Platform 10.6.1.1085
Endpoint Security Threat prevention 10.6.1.1058
I updated the extensions and the packages on the principal repository, but when it fails, i restore the previous version on the repository, which dont work. I uninstall and install again the old versions of the extensions, without any effect.
The clients where rebooted without eny effect too.
I already check the database connection with /core/config and seems fine in first sight
Im really lost on this, some thoughts?
Checking the McAfeeLogs folder i see some logs of errors when trying to install the hotfix package, due to "installation failed!! return code : 1642" Which seems to mean something like "the software that you want to update is not found", but is installed on the machine.
I can see the log of the Thread Prevention install too of 2 days ago, the day that i make the update.
Something specific that i need to look??
Maybe is something recommended to clean all the extensions and packages and install them again?
Might be worth getting on a remote with Support. Seems like you may have a few issues that need looking into, it's quite hard to hazard a guess via the community channel for this.