ENSL 10.7 Causing the issue on Linux systems (Hang)

[mukesh13m]

Hi 

Anybody facing any issue on the ENSL 10.7, in my environment I have recently upgraded the ENS 10.7 Hadoop systems and that all servers hang issue which disables the McAfee agent services and ENS -TP, Platform to fix the issue but right now in the box, McAfee products is the disabled mode. 

anyone know how I can start the investigation whether here culprit McAfee or other

also, what is the recommendation exclusion tunning on Hadoop servers? 

-Mukesh

[AjaySundar]

Hi @mukesh13m,

Good day to you!

I would like to know if you happen to see high CPU being utilized by the mfetpd process which eventually gets the machine to hang?

You can start off by adding the vendor and McAfee suggested exclusions.

Vendor:

https://docs.cloudera.com/documentation/enterprise/5-2-x/topics/admin_antivirus.html

McAfee:

https://kc.mcafee.com/corporate/index?page=content&id=KB88807&locale=en_US

Also, I would highly recommend you to check for the compatibility.

https://kc.mcafee.com/corporate/index?page=content&id=KB87073

If adding the exclusions doesn't help, we will have to isolate the component causing the issue.

Here is what I need you to do.

1. Enable McAfee on the machine

2. Start disabling each and every component of ENS

a. On access scanner

b. Access protection

Once you identify the component you can open a service request with us along with the MER log from the impacted machine for us to check further.

If the machine crashes, we would need a core dump from the machine along with the OS vendor analysis

Thanks