cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 9
Report Inappropriate Content
Message 1 of 3

Manually Update Exploit Prevention on Disconnected System

Hello

I have an system that is not connected to the internet and uses ENS. I manually update the Threat Prevention by downloading from http://update.nai.com/ the Commonupdater3 directory and placing in a repository. Threat Prevention update works fine. The dates for Exploit Prevention however are not updating. I realize these are not updated as frequently as the Threats but my dates are older than the currently released Exploit Prevention I see here https://www.mcafee.com/enterprise/en-us/release-notes/exploit-prevention.html. Mine are several versions behind. I download Commonupdater3 every week.

I do see the procedures in KB89050   https://kc.mcafee.com/corporate/index?page=content&id=KB89050&_ga=2.97205151.1815214423.1592569082-1...

Problem with those is it ends with checking these in with ePolicy Orchestrator. we don't have that. Downloading the files in KB89050 and placing them in the repo does not work. What am I missing here. 

There are several other threads here with the same issue that just reference the KB. But with out an ePO need other method. 

What am I missing here?

 

Thanks.

 

 

2 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Manually Update Exploit Prevention on Disconnected System

Hi @jtovb ,

Thank you for posting on the Community. We apologize for being late in answering you.

Commonupdater and Commonupdater2 have Exploit Prevention Contents.
McAfee supports replication of repositories using the ENS mirror task feature.

McAfee Endpoint Security 10.6.0 - Common Client Product Guide - Windows

> How mirror tasks work
> Configure, schedule, and run mirror tasks

First, set McAfeeHttp (http://update.nai.com/products/commonupdater) or CommonUpdater2 (http://update.nai.com/products/commonupdater2) as the source site to reference.
After then, you can replicate the content to a repository according to your mirror task settings.
In addtion, you should be able to update your exploit content by setting the source site to the repository replicated by the mirror task.

Best regards,

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?
Highlighted
Level 9
Report Inappropriate Content
Message 3 of 3

Re: Manually Update Exploit Prevention on Disconnected System

Hello

 

We do have a repository and do use it successfully. We had used VSE prior to updating to ENS. When we used VSE we did use Commonupdater content. That however does not work for ENS for Threat Prevention updates if I am not mistaken. I will try commonupdater2 this week and report back.

 

Thanks

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community