cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Jmac24
Level 11
Report Inappropriate Content
Message 1 of 4

Question on Mfefire.exe

Jump to solution

Looking to do some monitoring on if the status of someone's ENS firewall changes. We can actively monitor services, but on our systems (We are on 10.7 Feb 2021) that file is not active whether or not our ENS firewall is on and the service always shows as disabled.

Alternatively, the mfefw.exe is always running, even when our firewall policy is set to disabled...so I couldn't use that one to monitor on. Basically I'm just trying to understand why those files would be in those states. Functionality is as expected, it's blocking when on, not blocking when off so it's a little confusing when seeing that in a disabled state.

1 Solution

Accepted Solutions
ktankink
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Question on Mfefire.exe

Jump to solution

Hi @Jmac24 The Firecore service runs inside the MMS service (you can see the mfefire service using the "mmsinfo.exe -enum" command), so the Firecore services listed in the Windows Services menu is not used typically (left for Legacy product usage though).  Please reference https://kc.mcafee.com/corporate/index?page=content&id=KB85374 for more details about this.

View solution in original post

3 Replies
Pravas
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Question on Mfefire.exe

Jump to solution

Hi @Jmac24 ,

Thank you for your post. Are you looking to monitor the active status of Firewall?

You may also monitor the following registry key.

HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Endpoint\Firewall\FirewallStatus

Its set to 0 when disabled and 1 when enabled.

Thanks

Jmac24
Level 11
Report Inappropriate Content
Message 3 of 4

Re: Question on Mfefire.exe

Jump to solution

We are and I did give the requesting team that key to monitor as an alternative. That said, since mfefire.exe is an installed service and never appears to be active, even when firewall is active, I was trying to get clarification on the file and why that would be the case.

ktankink
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Question on Mfefire.exe

Jump to solution

Hi @Jmac24 The Firecore service runs inside the MMS service (you can see the mfefire service using the "mmsinfo.exe -enum" command), so the Firecore services listed in the Windows Services menu is not used typically (left for Legacy product usage though).  Please reference https://kc.mcafee.com/corporate/index?page=content&id=KB85374 for more details about this.

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community