cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 8
Report Inappropriate Content
Message 1 of 4

Make Call Home from McAfee SIEM 9.4.2

Jump to solution

Hello Everyone

I have the following problem, after i upgraded a SIEM from Version 9.3.2 to 9.4.2 i am unable to initiate a callhome. I have the following message

error callhome.PNG

Do this new version need another permissions in the firewall or it could be another reason?

Thanks

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

There is currently an outage for the call home server on McAfee's side. we will update once its back online.

In general though, the /var/log/messages file indicates the attempts to connect to the call home IP on port 443 (look for messages from openvpn). Ensure that is not being blocked on your firewall.

View solution in original post

3 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

There is currently an outage for the call home server on McAfee's side. we will update once its back online.

In general though, the /var/log/messages file indicates the attempts to connect to the call home IP on port 443 (look for messages from openvpn). Ensure that is not being blocked on your firewall.

View solution in original post

Highlighted
Level 8
Report Inappropriate Content
Message 3 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

Hello

Apparently the servers are up again, because i can stablsh callhome from another SIEM. Although when i try to initialize a callhome i receive the same message, viewing the logs i see messages like this:

McAfee openvpn[14394]: TCP: connect to 69.20.166.229:443 failed, will try again in 5 seconds: Connection refused

I think there is already a process trying to initialize a callhome, how can i terminate this process without affecting somewhere else?

Thanks

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Make Call Home from McAfee SIEM 9.4.2

Jump to solution

you can kill the existing openvpn process by running killall openvpn at the ssh prompt. Then type callhome again.

If the session is established, you would see an additional interface in the ifconfig output named tun0.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community