cancel
Showing results for 
Search instead for 
Did you mean: 
layer0
Level 8
Report Inappropriate Content
Message 1 of 4

Make Call Home from McAfee SIEM 9.4.2

Jump to solution

Hello Everyone

I have the following problem, after i upgraded a SIEM from Version 9.3.2 to 9.4.2 i am unable to initiate a callhome. I have the following message

error callhome.PNG

Do this new version need another permissions in the firewall or it could be another reason?

Thanks

1 Solution

Accepted Solutions
Highlighted
McAfee Employee spamidi
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

There is currently an outage for the call home server on McAfee's side. we will update once its back online.

In general though, the /var/log/messages file indicates the attempts to connect to the call home IP on port 443 (look for messages from openvpn). Ensure that is not being blocked on your firewall.

3 Replies
Highlighted
McAfee Employee spamidi
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

There is currently an outage for the call home server on McAfee's side. we will update once its back online.

In general though, the /var/log/messages file indicates the attempts to connect to the call home IP on port 443 (look for messages from openvpn). Ensure that is not being blocked on your firewall.

layer0
Level 8
Report Inappropriate Content
Message 3 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

Hello

Apparently the servers are up again, because i can stablsh callhome from another SIEM. Although when i try to initialize a callhome i receive the same message, viewing the logs i see messages like this:

McAfee openvpn[14394]: TCP: connect to 69.20.166.229:443 failed, will try again in 5 seconds: Connection refused

I think there is already a process trying to initialize a callhome, how can i terminate this process without affecting somewhere else?

Thanks

McAfee Employee spamidi
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

you can kill the existing openvpn process by running killall openvpn at the ssh prompt. Then type callhome again.

If the session is established, you would see an additional interface in the ifconfig output named tun0.

More McAfee Tools to Help You
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • Visit: Business Service Portal
  • More: Search Knowledge Articles
  • ePolicy Orchestrator Support
  • The McAfee ePO Support Center Plug-in is now available in the Software Manager. Follow the instructions in the Product Guide for more.