cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Problem with Update DAT and Engine for ENSL in unmanaged mode

Hello Community,

I try to update DAT and Engine on an ENS for Linux in unmanaged mode,

The system has no possibility to access to the internet. I downloaded the (for my understanding) needed files from http://update.nai.com/products/commonupdater/ and stored it in /tmp/DAT-Test.

- content of the folder http://update.nai.com/products/commonupdater/
- content of the folder http://update.nai.com/products/commonupdater/current/
- content and subfolder of  folder http://update.nai.com/products/commonupdater/current/amcordat2000/
- content and subfolder of http://update.nai.com/products/commonupdater/current/lv2sneng1000/
- content and subfolder of http://update.nai.com/products/commonupdater/current/endpcnt_1000/

I added the repositorys descriped in this way like https://kc.mcafee.com/agent/index?page=content&id=KB89034

Unfortunately there is no sample for adding a local repository.

My current repository:

 

 

/opt/isec/ens/threatprevention/bin/isecav --showrepositories
Repository Settings
 ------------------------------------------------------------------------------------------------------------------------------------------------------------------
|Enabled   Priority   Name                           Type    Server Name                    Server Path                    Port       Username                     |
 ------------------------------------------------------------------------------------------------------------------------------------------------------------------
|Yes       1          DAT-Test-full                  local   N.A                            tmp/DAT-Test                   N.A        N.A                          |
|Yes       2          DAT-Test-current               local   N.A                            tmp/DAT-Test/current           N.A        N.A                          |
|Yes       3          DAT-Test-amcoredat2000         local   N.A                            tmp/DAT-Test/current/amcoredat2000 N.A        N.A                          |
|Yes       4          DAT-Test-LV2SNENG1000          local   N.A                            tmp/DAT-Test/current/LV2SNENG1000 N.A        N.A                          |
|Yes       5          DAT-Test-endpcnt_1000          local   N.A                            tmp/DAT-Test/current/endpcnt_1000 N.A        N.A                          |
|Yes       6          DAT-Test-Folder-http           local   N.A                            tmp/DAT-Test                   N.A        N.A                          |
|Yes       7          NAIHttp                        http    update.nai.com                 products/commonupdater         80         N.A                          |
|Yes       8          NAIFtp                         ftp     ftp.nai.com                    CommonUpdater                  21         anonymous                    |
 ------------------------------------------------------------------------------------------------------------------------------------------------------------------

 

 

 

When i try to run the Update Task it fails:

 

 

 

2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository DAT-Test-full
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D] downloadFile,SiteStat.xml,/var/McAfee/agent/update
2019-10-28 15:42:27 [144039]  (16384) [downloader] [I] Downloading file from file://tmp/DAT-Test/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local URL request created
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local url to download file://tmp/DAT-Test/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [D] Downloading file from tmp/DAT-Test/SiteStat.xml in sync way
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] fs open failed.
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E] Error trace:
2019-10-28 15:42:27 [144039]  (16384)        [Log] [E]  [Main thread]->
2019-10-28 15:42:27 [144039]  (16384)    [SessMgr] [E]  [initializeScript]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [setNextRepositoryToUse]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [downloadFile,SiteStat.xml,/var/McAfee/agent/update]->
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E]   Downloading file from file://tmp/DAT-Test/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml failed.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D]  Can't download SiteStat.xml file
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Repository DAT-Test-full is not usable for the current update session.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository DAT-Test-current
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D] downloadFile,SiteStat.xml,/var/McAfee/agent/update
2019-10-28 15:42:27 [144039]  (16384) [downloader] [I] Downloading file from file://tmp/DAT-Test/current/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local URL request created
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local url to download file://tmp/DAT-Test/current/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [D] Downloading file from tmp/DAT-Test/current/SiteStat.xml in sync way
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] fs open failed.
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E] Error trace:
2019-10-28 15:42:27 [144039]  (16384)        [Log] [E]  [Main thread]->
2019-10-28 15:42:27 [144039]  (16384)    [SessMgr] [E]  [initializeScript]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [setNextRepositoryToUse]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [downloadFile,SiteStat.xml,/var/McAfee/agent/update]->
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E]   Downloading file from file://tmp/DAT-Test/current/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml failed.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D]  Can't download SiteStat.xml file
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Repository DAT-Test-current is not usable for the current update session.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository DAT-Test-amcoredat2000
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D] downloadFile,SiteStat.xml,/var/McAfee/agent/update
2019-10-28 15:42:27 [144039]  (16384) [downloader] [I] Downloading file from file://tmp/DAT-Test/current/amcoredat2000/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local URL request created
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local url to download file://tmp/DAT-Test/current/amcoredat2000/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [D] Downloading file from tmp/DAT-Test/current/amcoredat2000/SiteStat.xml in sync way
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] fs open failed.
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E] Error trace:
2019-10-28 15:42:27 [144039]  (16384)        [Log] [E]  [Main thread]->
2019-10-28 15:42:27 [144039]  (16384)    [SessMgr] [E]  [initializeScript]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [setNextRepositoryToUse]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [downloadFile,SiteStat.xml,/var/McAfee/agent/update]->
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E]   Downloading file from file://tmp/DAT-Test/current/amcoredat2000/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml failed.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D]  Can't download SiteStat.xml file
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Repository DAT-Test-amcoredat2000 is not usable for the current update session.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository DAT-Test-LV2SNENG1000
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D] downloadFile,SiteStat.xml,/var/McAfee/agent/update
2019-10-28 15:42:27 [144039]  (16384) [downloader] [I] Downloading file from file://tmp/DAT-Test/current/LV2SNENG1000/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local URL request created
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local url to download file://tmp/DAT-Test/current/LV2SNENG1000/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [D] Downloading file from tmp/DAT-Test/current/LV2SNENG1000/SiteStat.xml in sync way
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] fs open failed.
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E] Error trace:
2019-10-28 15:42:27 [144039]  (16384)        [Log] [E]  [Main thread]->
2019-10-28 15:42:27 [144039]  (16384)    [SessMgr] [E]  [initializeScript]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [setNextRepositoryToUse]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [downloadFile,SiteStat.xml,/var/McAfee/agent/update]->
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E]   Downloading file from file://tmp/DAT-Test/current/LV2SNENG1000/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml failed.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D]  Can't download SiteStat.xml file
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Repository DAT-Test-LV2SNENG1000 is not usable for the current update session.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository DAT-Test-endpcnt_1000
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D] downloadFile,SiteStat.xml,/var/McAfee/agent/update
2019-10-28 15:42:27 [144039]  (16384) [downloader] [I] Downloading file from file://tmp/DAT-Test/current/endpcnt_1000/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local URL request created
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local url to download file://tmp/DAT-Test/current/endpcnt_1000/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [D] Downloading file from tmp/DAT-Test/current/endpcnt_1000/SiteStat.xml in sync way
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] fs open failed.
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E] Error trace:
2019-10-28 15:42:27 [144039]  (16384)        [Log] [E]  [Main thread]->
2019-10-28 15:42:27 [144039]  (16384)    [SessMgr] [E]  [initializeScript]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [setNextRepositoryToUse]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [downloadFile,SiteStat.xml,/var/McAfee/agent/update]->
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E]   Downloading file from file://tmp/DAT-Test/current/endpcnt_1000/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml failed.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D]  Can't download SiteStat.xml file
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Repository DAT-Test-endpcnt_1000 is not usable for the current update session.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository DAT-Test-Folder-http
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D] downloadFile,SiteStat.xml,/var/McAfee/agent/update
2019-10-28 15:42:27 [144039]  (16384) [downloader] [I] Downloading file from file://tmp/DAT-Test/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local URL request created
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] Local url to download file://tmp/DAT-Test/SiteStat.xml
2019-10-28 15:42:27 [144039]  (16384)    [network] [D] Downloading file from tmp/DAT-Test/SiteStat.xml in sync way
2019-10-28 15:42:27 [144039]  (16384)    [network] [I] fs open failed.
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E] Error trace:
2019-10-28 15:42:27 [144039]  (16384)        [Log] [E]  [Main thread]->
2019-10-28 15:42:27 [144039]  (16384)    [SessMgr] [E]  [initializeScript]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [setNextRepositoryToUse]->
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [E]  [downloadFile,SiteStat.xml,/var/McAfee/agent/update]->
2019-10-28 15:42:27 [144039]  (16384) [downloader] [E]   Downloading file from file://tmp/DAT-Test/SiteStat.xml to /var/McAfee/agent/update/SiteStat.xml failed.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [D]  Can't download SiteStat.xml file
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Repository DAT-Test-Folder-http is not usable for the current update session.
2019-10-28 15:42:27 [144039]  (16384)    [creposi] [I] Trying the repository NAIHttp

 

 

 

What do i wrong here?

 

Thanks & Regards

7 Replies
LKS
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

Hi rokasporch,

You have downloaded DAT from wrong location.

Use the following steps to manually update the VSEL DATs

  1. Download the latest V2 DAT Package For Use with McAfee ePO:
     
    https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html
     
    The file name is similar to avvepoXXXXdat.zip, where XXXX is the daily DAT number.
     
  2. Extract the avvdat-<DAT version>.zip file from the avvepoXXXXdat.zip archive file.
     
  3. Copy the avvdat-<DAT version>.zip file to a temporary folder on the Linux server and decompress the ZIP archive. For example, copy the avvdat-<DAT version>.zip file to /tmp/dat/avvdat-<DAT version>.zip and then run the following commands:
     
    # cd /tmp/dat
    # unzip avvdat-
    <DAT version>.zip
     
  4. Change the current directory to:
     
    /opt/isec/ens/threatprevention/var/engine/dat/
     
  5. Create a directory with the name of the DAT version to which you want to update, and change the permission to the correct one. For example, if the DAT version you downloaded is 8372:
     
    # mkdir /opt/isec/ens/threatprevention/var/engine/dat/8372
    # chmod 600 /opt/isec/ens/threatprevention/var/engine/dat/8372
     
  6. Copy DAT files under the directory created in step 5, and change the permission to the correct one. For example:
     
    # cp /tmp/dat/*.dat /opt/isec/ens/threatprevention/var/engine/dat/8372
    # chmod 600 /opt/isec/ens/threatprevention/var/engine/dat/8372/*

     
  7. Edit the /opt/isec/ens/threatprevention/var/prefs.xml file and change the value of the <MajorDATVersion> tag to the DAT version to which you want to update. For example, if the DAT version you downloaded is 8372:
     
    <MajorDATVersion>8372</MajorDATVersion>
    <ExtraDATVersion>0</ExtraDATVersion>
    <MajorEngineVersion>5800</MajorEngineVersion>
    <MinorDATVersion>0</MinorDATVersion>
    <MinorEngineVersion>7501</MinorEngineVersion>
     
  8. Restart the isectpd service to reflect the change:

    # /opt/isec/ens/threatprevention/bin/isectpdControl.sh restart
     
  9. Confirm the DAT version is reflected as expected and that the following command shows the correct version for the DAT Version item:
     
    # /opt/isec/ens/threatprevention/bin/isecav --version

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

Hello LKS,

thank you very much for your replay.

The way what are you descriped are working fine.

But my goal is to use the repository function of ENSL because there are more than one system in unmanaged mode and it is not planned to use a McAfee ePO Server.

 

I want to create a network share and store the needed files for the unmanaged ENSL Systems.

How has this share looks like? What files has to be stored there?

 

Thanks & Regard

LKS
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 8

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

Hi rokasporch,

If you want to have a shared location to update DAT to unmanaged machines, you can create Mirror task in ENS to achieve this (without EPO). I would suggest you can check it out to see how it works. 

https://docs.mcafee.com/bundle/endpoint-security-10.6.0-common-client-product-guide-windows/page/GUI...

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

Hi LKS,

this way expect a running ENS for Windows in unmanaged mode, right?

Is there another way to go?

 

I tryed this way and a Mirror task to an Network share failed. When I try to mirror the task to the local harddisk the following error occure:

 

2019-10-29 09:22:13.383 masvc(6944.6156) Repository.Info: Processing mirror task start request.
2019-10-29 09:22:13.383 masvc(6944.6156) Repository.Info: Received mirror task request: initiator_type <0> request_type <0> taskid <{35babcb6-fa25-11e9-30ba-392abeffa458}>
2019-10-29 09:22:13.383 masvc(6944.6156) repomirror.Info: XXXX in ma_mirror_request_start
2019-10-29 09:22:13.383 masvc(6944.6156) repomirror.Info: XXXX log_size_limit = 2 max_rollovers = 1
2019-10-29 09:22:13.489 masvc(6944.6156) msgbus.Info: QueryFullProcessImageName C:\Program Files\McAfee\Agent\x86\marepomirror.exe
2019-10-29 09:22:13.499 masvc(6944.6156) msgbus.Info: verify code signature returns <0>, GetLastError <0>.
2019-10-29 09:22:13.513 masvc(6944.6156) msgbus.Info: executable <C:\Program Files\McAfee\Agent\x86\marepomirror.exe> is trusted via authenticode. Signer: <McAfee, Inc.> Issuer: <Symantec Class 3 SHA256 Code Signing CA>
2019-10-29 09:22:13.513 masvc(6944.6156) msgbus.Info: Allowing <6772> onto msgbus
2019-10-29 09:22:20.109 masvc(6944.6156) ioservice.Info: IO service received the message.
2019-10-29 09:22:25.124 masvc(6944.6156) scheduler.Info: Scheduler: Task [{35babcb6-fa25-11e9-30ba-392abeffa458}] is finished
2019-10-29 09:22:25.138 masvc(6944.6156) scheduler.Info: The task {35babcb6-fa25-11e9-30ba-392abeffa458} is freed
2019-10-29 09:22:25.138 masvc(6944.6156) Repository.Info: Mirror task was not completed.
LKS
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

Really not sure what could be an issue. Are there any logs by the name "marepomirror_error" been generated in <programdata>/mcafee/agent/logs.

 

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

Hi LKS,

I have clean up the system and try it now from scatch so when it fails again i will look after this logs

Questions to prevent a mix up of multiple topics in this thread:

1)  an ENS for Windows is needed for the Mirror Task. Should this ENSW in managed (from ePO) or unmanaged mode?

2) which files from which folders takes a ENSL from http://update.nai.com/products/commonupdater/  when the unmanaged ENSL has connectivity to the internet?

LKS
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 8

Re: Problem with Update DAT and Engine for ENSL in unmanaged mode

To update Engine, follow https://kc.mcafee.com/corporate/index?page=content&id=KB88300&elqTrackId=D12CEB4FC5365FC0C8A9D7812AB... 

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community