cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Mac Mountain Lion 10.8.5 not managed in EPO 4.6.5, McAfee agent successfully installed

I have an Issue of a Mac with Mountain Lion 10.8.5 not being managed in McAfee EPO 4.6.5, although the McAfee agent was successfully installed.  I am thinking I have a firewall issue on the Mac but am not sure.  I have supplied the following information:

9/19/13 1:57:25 PM Starting deployment to computer tech-xxxx through the Agent Handler MAINTENANCE.xxxx.dom
9/19/13 1:57:25 PM SSH Output: Looking up host "tech-xxxx"
9/19/13 1:57:25 PM SSH Output: Connecting to 10.1.1.180 port 22
9/19/13 1:57:25 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
9/19/13 1:57:25 PM SSH Output: Using SSH protocol version 2
9/19/13 1:57:25 PM SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871
9/19/13 1:57:25 PM SSH Output: Doing Diffie-Hellman group exchange
9/19/13 1:57:25 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
9/19/13 1:57:25 PM SSH Output: Host key fingerprint is:
9/19/13 1:57:25 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
9/19/13 1:57:25 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
9/19/13 1:57:25 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
9/19/13 1:57:25 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
9/19/13 1:57:25 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
9/19/13 1:57:25 PM SSH Output: Using username "dmartin".
9/19/13 1:57:25 PM SSH Output: Access granted
9/19/13 1:57:25 PM SSH Output: Opened channel for session
9/19/13 1:57:25 PM SSH Output: Started a shell/command
9/19/13 1:57:27 PM SSH Output: Using SFTP
9/19/13 1:57:27 PM SSH Output: Connected to tech-imac.xxxx.dom
9/19/13 1:57:27 PM SSH Output: Sending file install.sh
9/19/13 1:57:27 PM SSH Output: Sent EOF message
9/19/13 1:57:27 PM SSH Output: Server sent command exit status 0
9/19/13 1:57:27 PM SSH Output: Disconnected: All channels closed
9/19/13 1:57:28 PM SSH Output: Looking up host "tech-xxxx"
9/19/13 1:57:28 PM SSH Output: Connecting to 10.1.1.180 port 22
9/19/13 1:57:28 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
9/19/13 1:57:28 PM SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60
9/19/13 1:57:28 PM SSH Output: Using SSH protocol version 2
9/19/13 1:57:28 PM SSH Output: Doing Diffie-Hellman group exchange
9/19/13 1:57:28 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
9/19/13 1:57:28 PM SSH Output: Host key fingerprint is:
9/19/13 1:57:28 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
9/19/13 1:57:28 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
9/19/13 1:57:28 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
9/19/13 1:57:28 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
9/19/13 1:57:28 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
9/19/13 1:57:28 PM SSH Output: Using username "dmartin".
9/19/13 1:57:28 PM SSH Output: Access granted
9/19/13 1:57:28 PM SSH Output: Opened channel for session
9/19/13 1:57:28 PM SSH Output: Started a shell/command
9/19/13 1:57:28 PM SSH Output: Password:space required to copy archive is 35824768 bytes
9/19/13 1:57:28 PM SSH Output: space available at mfe8rOT5r is 3096245673984 bytes
9/19/13 1:57:28 PM SSH Output: extracting archive to mfe8rOT5r... please wait
9/19/13 1:57:28 PM SSH Output: 204+0 records in
9/19/13 1:57:28 PM SSH Output: 204+0 records out
9/19/13 1:57:28 PM SSH Output: 104448 bytes transferred in 0.000549 secs (190224344 bytes/sec)
9/19/13 1:57:28 PM SSH Output: 34766+1 records in
9/19/13 1:57:28 PM SSH Output: 34766+1 records out
9/19/13 1:57:28 PM SSH Output: 17800688 bytes transferred in 0.088575 secs (200967123 bytes/sec)
9/19/13 1:57:28 PM SSH Output: Archive: mfe8rOT5r/package.zip
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/MFEcma.dmg
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/reqseckey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/srpubkey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/sitelist.xml
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/req2048seckey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/sr2048pubkey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/agentfipsmode
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/RepoKeys.ini
9/19/13 1:57:29 PM SSH Output: Checksumming whole disk (Apple_HFS : 0)…
9/19/13 1:57:29 PM SSH Output: whole disk (Apple_HFS : 0): verified CRC32 $7A4857A0
9/19/13 1:57:29 PM SSH Output: verified CRC32 $78632BE7
9/19/13 1:57:31 PM SSH Output: /dev/disk3 /Volumes/MFECMA
9/19/13 1:57:37 PM SSH Output: installer: Package name is McAfee Agent
9/19/13 1:57:37 PM SSH Output: installer: Installing at base path /
9/19/13 1:57:37 PM SSH Output: installer: The install was successful.
9/19/13 1:57:41 PM SSH Output: "disk3" unmounted.
9/19/13 1:57:41 PM SSH Output: "disk3" ejected.
9/19/13 1:57:41 PM SSH Output: Server sent command exit status 0
9/19/13 1:57:41 PM SSH Output: Disconnected: All channels closed
9/19/13 1:57:42 PM SSH Output: Looking up host "tech-xxxx"
9/19/13 1:57:42 PM SSH Output: Connecting to 10.1.1.180 port 22
9/19/13 1:57:42 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
9/19/13 1:57:42 PM SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60
9/19/13 1:57:42 PM SSH Output: Using SSH protocol version 2
9/19/13 1:57:42 PM SSH Output: Doing Diffie-Hellman group exchange
9/19/13 1:57:42 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
9/19/13 1:57:42 PM SSH Output: Host key fingerprint is:
9/19/13 1:57:42 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
9/19/13 1:57:42 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
9/19/13 1:57:42 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
9/19/13 1:57:42 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
9/19/13 1:57:42 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
9/19/13 1:57:42 PM SSH Output: Using username "dmartin".
9/19/13 1:57:42 PM SSH Output: Access granted
9/19/13 1:57:42 PM SSH Output: Opened channel for session
9/19/13 1:57:42 PM SSH Output: Started a shell/command
9/19/13 1:57:42 PM SSH Output: Server sent command exit status 0
9/19/13 1:57:42 PM SSH Output: Disconnected: All channels closed
9/19/13 1:57:43 PM

Deploy agent installation package to target system was successful

I can see the cma is running on the Mac:

Mac cma.PNG

I opened firewall ports on the Mac to insure the needed ports were open to communicate with the EPO server:

Mac ports.PNG

But when I do a scan ports, I do not see the correct ports open.  I the IP addressed changed over the last few days (DHCP) of troubleshooting so it is not the same as the initial install as the log above:

Mac scanned ports.PNG

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community