McAfee has identified a compatibility issue in the VirusScan driver code of several McAfee productswhen interacting with McAfee Host DLP 9.1+.
This issue is critical, but the risk of encounter is low.
Specifically, when any of these products — VirusScan Enterprise (VSE) 8.8 Patch 1, VSE 8.7 Patch 5, *OR* Host Intrusion Protection (HIPs) 8.0 Patch 1 — are operating on the same system as Host Data Loss Prevention (HDLP) 9.1+, random BSODs (Blue Screens of Death) may occur.PLEASE NOTE that HDLP does not need to be configured, only active on endpoints for this random issue to occur.
VSE 8.8 Patch 1 is functional and operational, and resolves numerous VSE issues. McAfee will resolve the incompatibility with a VSE and/or HIPS patch.
1. If you DO have HDLP 9.1+ installed on a system running VSE and HIPS, do NOT upgrade to any of the following versions:
- VSE 8.7 Patch 5
- VSE 8.8 Patch 1
- Host IPS 8.0 Patch 1
Wait to install VSE 8.8 or HIPS 8.0 with the hot fixes as soon as they are available.
2. If you DO have HDLP 9.1+ *AND* the affected VSE/HIPS versions installed on the same system, de-install HDLP. This can be accomplished via ePO. Wait to install VSE 8.8 or HIPS 8.0 with the hot fixes as soon as they are available.
3. If you do NOT have HDLP 9.x installed on any system in your production environment, proceed with the VSE 8.8 Patch 1, 8.7 Patch 5, or HIPS 8.0 Patch 1 installations. Again, VSE 8.8 Patch 1 is functional and operational, and resolves numerous VSE issues.
For further information, please reference the McAfee KnowledgeBase. Log in to mysupport.mcafee.com and search for KB73722.
McAfee Support Notification Service (SNS) provides valuable information to help you maximize the functionality and protection capabilities of your McAfee products.
To securely manage your SNS email preferences, go to https://sns.secureforms.mcafee.com/content/SNS_Subscription_Center
For Support issues, contact your Support Account Manager (SAM), or go to https://mysupport.mcafee.com
For McAfee online communities, go to https://community.mcafee.com
McAfee, Inc. | 2821 Mission College Blvd. | Santa Clara, CA | 95054 | 888.847.8766 | www.mcafee.com
2011 © McAfee, Inc. All rights reserved.
Message was edited by: SteveKaye@Baird on 12/21/11 8:15:44 AM CST
Has anyone heard anything else about this? Its affected a few of my machines and I would like to be able to finish updating a few mcafee products.
Call support and they will give you the hotfix. We were affected by it and are now testing out the hotfix. So far so good.
No luck, support wont release the patch to me without a system dump file for them... as soon as this happens I remove DLP so the end user can work.
Mcafee also said patch will be released to the world in the next 2 weeks.