I have an Issue of a Mac with Mountain Lion 10.8.5 not being managed in McAfee EPO 4.6.5, although the McAfee agent was successfully installed. I am thinking I have a firewall issue on the Mac but am not sure. I have supplied the following information:
9/19/13 1:57:25 PM | Starting deployment to computer tech-xxxx through the Agent Handler MAINTENANCE.xxxx.dom |
9/19/13 1:57:25 PM | SSH Output: Looking up host "tech-xxxx" |
9/19/13 1:57:25 PM | SSH Output: Connecting to 10.1.1.180 port 22 |
9/19/13 1:57:25 PM | SSH Output: Server version: SSH-2.0-OpenSSH_5.9 |
9/19/13 1:57:25 PM | SSH Output: Using SSH protocol version 2 |
9/19/13 1:57:25 PM | SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871 |
9/19/13 1:57:25 PM | SSH Output: Doing Diffie-Hellman group exchange |
9/19/13 1:57:25 PM | SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256 |
9/19/13 1:57:25 PM | SSH Output: Host key fingerprint is: |
9/19/13 1:57:25 PM | SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6 |
9/19/13 1:57:25 PM | SSH Output: Initialised AES-256 SDCTR client->server encryption |
9/19/13 1:57:25 PM | SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm |
9/19/13 1:57:25 PM | SSH Output: Initialised AES-256 SDCTR server->client encryption |
9/19/13 1:57:25 PM | SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm |
9/19/13 1:57:25 PM | SSH Output: Using username "dmartin". |
9/19/13 1:57:25 PM | SSH Output: Access granted |
9/19/13 1:57:25 PM | SSH Output: Opened channel for session |
9/19/13 1:57:25 PM | SSH Output: Started a shell/command |
9/19/13 1:57:27 PM | SSH Output: Using SFTP |
9/19/13 1:57:27 PM | SSH Output: Connected to tech-imac.xxxx.dom |
9/19/13 1:57:27 PM | SSH Output: Sending file install.sh |
9/19/13 1:57:27 PM | SSH Output: Sent EOF message |
9/19/13 1:57:27 PM | SSH Output: Server sent command exit status 0 |
9/19/13 1:57:27 PM | SSH Output: Disconnected: All channels closed |
9/19/13 1:57:28 PM | SSH Output: Looking up host "tech-xxxx" |
9/19/13 1:57:28 PM | SSH Output: Connecting to 10.1.1.180 port 22 |
9/19/13 1:57:28 PM | SSH Output: Server version: SSH-2.0-OpenSSH_5.9 |
9/19/13 1:57:28 PM | SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60 |
9/19/13 1:57:28 PM | SSH Output: Using SSH protocol version 2 |
9/19/13 1:57:28 PM | SSH Output: Doing Diffie-Hellman group exchange |
9/19/13 1:57:28 PM | SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256 |
9/19/13 1:57:28 PM | SSH Output: Host key fingerprint is: |
9/19/13 1:57:28 PM | SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6 |
9/19/13 1:57:28 PM | SSH Output: Initialised AES-256 SDCTR client->server encryption |
9/19/13 1:57:28 PM | SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm |
9/19/13 1:57:28 PM | SSH Output: Initialised AES-256 SDCTR server->client encryption |
9/19/13 1:57:28 PM | SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm |
9/19/13 1:57:28 PM | SSH Output: Using username "dmartin". |
9/19/13 1:57:28 PM | SSH Output: Access granted |
9/19/13 1:57:28 PM | SSH Output: Opened channel for session |
9/19/13 1:57:28 PM | SSH Output: Started a shell/command |
9/19/13 1:57:28 PM | SSH Output: Password:space required to copy archive is 35824768 bytes |
9/19/13 1:57:28 PM | SSH Output: space available at mfe8rOT5r is 3096245673984 bytes |
9/19/13 1:57:28 PM | SSH Output: extracting archive to mfe8rOT5r... please wait |
9/19/13 1:57:28 PM | SSH Output: 204+0 records in |
9/19/13 1:57:28 PM | SSH Output: 204+0 records out |
9/19/13 1:57:28 PM | SSH Output: 104448 bytes transferred in 0.000549 secs (190224344 bytes/sec) |
9/19/13 1:57:28 PM | SSH Output: 34766+1 records in |
9/19/13 1:57:28 PM | SSH Output: 34766+1 records out |
9/19/13 1:57:28 PM | SSH Output: 17800688 bytes transferred in 0.088575 secs (200967123 bytes/sec) |
9/19/13 1:57:28 PM | SSH Output: Archive: mfe8rOT5r/package.zip |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/MFEcma.dmg |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/reqseckey.bin |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/srpubkey.bin |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/sitelist.xml |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/req2048seckey.bin |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/sr2048pubkey.bin |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/agentfipsmode |
9/19/13 1:57:29 PM | SSH Output: inflating: mfe8rOT5r/RepoKeys.ini |
9/19/13 1:57:29 PM | SSH Output: Checksumming whole disk (Apple_HFS : 0)… |
9/19/13 1:57:29 PM | SSH Output: whole disk (Apple_HFS : 0): verified CRC32 $7A4857A0 |
9/19/13 1:57:29 PM | SSH Output: verified CRC32 $78632BE7 |
9/19/13 1:57:31 PM | SSH Output: /dev/disk3 /Volumes/MFECMA |
9/19/13 1:57:37 PM | SSH Output: installer: Package name is McAfee Agent |
9/19/13 1:57:37 PM | SSH Output: installer: Installing at base path / |
9/19/13 1:57:37 PM | SSH Output: installer: The install was successful. |
9/19/13 1:57:41 PM | SSH Output: "disk3" unmounted. |
9/19/13 1:57:41 PM | SSH Output: "disk3" ejected. |
9/19/13 1:57:41 PM | SSH Output: Server sent command exit status 0 |
9/19/13 1:57:41 PM | SSH Output: Disconnected: All channels closed |
9/19/13 1:57:42 PM | SSH Output: Looking up host "tech-xxxx" |
9/19/13 1:57:42 PM | SSH Output: Connecting to 10.1.1.180 port 22 |
9/19/13 1:57:42 PM | SSH Output: Server version: SSH-2.0-OpenSSH_5.9 |
9/19/13 1:57:42 PM | SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60 |
9/19/13 1:57:42 PM | SSH Output: Using SSH protocol version 2 |
9/19/13 1:57:42 PM | SSH Output: Doing Diffie-Hellman group exchange |
9/19/13 1:57:42 PM | SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256 |
9/19/13 1:57:42 PM | SSH Output: Host key fingerprint is: |
9/19/13 1:57:42 PM | SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6 |
9/19/13 1:57:42 PM | SSH Output: Initialised AES-256 SDCTR client->server encryption |
9/19/13 1:57:42 PM | SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm |
9/19/13 1:57:42 PM | SSH Output: Initialised AES-256 SDCTR server->client encryption |
9/19/13 1:57:42 PM | SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm |
9/19/13 1:57:42 PM | SSH Output: Using username "dmartin". |
9/19/13 1:57:42 PM | SSH Output: Access granted |
9/19/13 1:57:42 PM | SSH Output: Opened channel for session |
9/19/13 1:57:42 PM | SSH Output: Started a shell/command |
9/19/13 1:57:42 PM | SSH Output: Server sent command exit status 0 |
9/19/13 1:57:42 PM | SSH Output: Disconnected: All channels closed |
9/19/13 1:57:43 PM | Deploy agent installation package to target system was successful |
I can see the cma is running on the Mac:
I opened firewall ports on the Mac to insure the needed ports were open to communicate with the EPO server:
But when I do a scan ports, I do not see the correct ports open. I the IP addressed changed over the last few days (DHCP) of troubleshooting so it is not the same as the initial install as the log above:
Corporate Headquarters
6220 America Center Drive
San Jose, CA 95002 USA