One of our Linux admins has an issue with DAT updates on a host. He updated the dats manually and is still seeing them as dated 2/28/202.
[root@xxx804 4902]# !1020
/opt/McAfee/ens/tp/bin/mfetpcli --version
McAfee Endpoint Security for Linux Threat Prevention
Version : 10.7.7.24
License : Full
DAT Version : 4902.0
DAT Date : 28-02-2022
Engine Version : 6300.9389
Exploit Prevention Content Version : 10.7.0.00229
The admin found dats 4903 on another host and brought them over. Staged in the right spot. Edited the xml. Restarted the process. It reports the right upper number (4903) but still says the dats are dated 2-28-2022. I’ve not run into this before.. so hopefully they can offer some insight.
McAfee Endpoint Security for Linux Threat Prevention
Version : 10.7.7.24
License : Full
DAT Version : 4903.0
DAT Date : 28-02-2022
Engine Version : 6300.9389
Exploit Prevention Content Version : 10.7.0.00229