McAfee Move Agentless 4.9

[Siki]

Hi,

We're planning to implement McAfee Move Agentless 4.9

Configuration of McAfee EPO 5.10 update 9, NSX Manager 6.4.6 is already done, vCenter and ESXI hosts are on versions 6.7 U1. This infrastructure configuration supports  McAfee Move Agentless 4.9.

However, I'm interested if there is a potential problem because in this environment huge numbers of the VM have old compatibility hardware version (VM Version), which is version 7-12, and also this VM uses old VMware tools, for example, 10240. Can this configuration VM make a problem?

Thanks.

[AjaySundar]

Hi @Siki,

Good day to you!

Unfortunately, we wouldn't be able to provide much information on the compatibility part but from the scanning perspective using older VM tools means having an old vsepflt file filter driver.

This could cause problems with not sending the I/Os properly for a scan which will lead to performance issues and if the scan calls pile up on the local machine it would eventually crash the machine.

We would recommend you to go through the release notes of VMtools for further clarification or contact the VMware team to get more information on this.

In the MOVE agentless environment there are no traces of the McAfee on the endpoints, hence we are unable to contribute much in this case.

I hope this helps.

Regards,

AJ

[aguevara]

Hello Siki

On top of what my colleague AjaySundar suggest, I have been looking that the Vmware documentation and NSX 6.4.6 recommends upgrading VMware Tools to 10.3.10 : 

https://docs.vmware.com/en/VMware-NSX-Data-Center-for-vSphere/6.4/rn/releasenotes_nsx_vsphere_646.ht...

"It is recommended that you upgrade VMware Tools to 10.3.10 before upgrading NSX for vSphere."

Best regards

Alejandro 

[jsam]

Hello, possibly of use also

https://kb.vmware.com/s/article/2139740 . Recommended VMware Tools version for Guest Introspection in VMware NSX for vSphere 6.x (2139740)

and

Support for McAfee MOVE AntiVirus [Agentless] 4.7 / 4.8 / 4.8.1 / 4.9.0 with NSX Manager 6.3.x and 6.4.x (56616)

[Siki]

Hi,

Thanks all of you for a fast response.
We will definitely first upgrade VMware tools on VM.

Regards.