DAT file failed to update

[User34095367]

System stopped updating the DAT file after McAfee agent was upgraded from 4.8 to 5.0.6.463. System has VirusScan 8.8.0.1982 and McAfee agent 5.0.6.463. Error from masvc_.log: 2019-10-10 00:01:03.834 masvc(3380.3644) proxy_detect.Error: for session_id <0> , WTSQueryUserToken() failed or user_token return as NULL err <1008> 2019-10-10 00:01:03.834 masvc(3380.3644) proxy_detect.Error: for session_id <0> , WTSQueryUserToken() failed or user_token return as NULL err <1008> 2019-10-10 00:01:03.834 masvc(3380.3644) Repository.Error: detect system proxy failed . 2019-10-10 00:01:10.433 masvc(3380.3384) masvc.Info: Received handler control code , event_type <(0x0)> context <0000000000000000> 2019-10-10 00:01:10.449 masvc(3380.3384) masvc.Info: Received handler control code , event_type <(0x0)> context <0000000000000000> 2019-10-10 00:01:11.353 masvc(3380.3384) masvc.Info: Received handler control code , event_type <(0x0)> context <0000000000000000> The error code from the client event is "unable to find valid repository". Telnet to the distributed repository is successful.

[LKS]

Hi User34095367,

If you get "unable to find valid repository", then client has trouble connecting to one of the assigned repository. May i know what type of repository it is. Check if any of the repository assigned to the Target machine. If it is SADR repository, then check if port 8081 is accessible from client. If it is ePO, then Port 443.

What do you see in McScript log.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a soultion" if this reply resolves your query!

[User34095367]

Thanks for the reply.  The distributed repository is a HTTP repository.  A telnet to the distributed repository was successful, therefore, there is no connectivity issues to the repository from the system.  85% or more systems on the same subnet are updating the DAT file.

I haven't looked at the McScript.log yet.  I will look at the log.

[LKS]

Great BTW is there any specific reason for upgrading to Agent 5.0.6 as it is quite old. We recommend you to upgrade to latest Agent 5.6 to benefit from the latest software developments.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a soultion" if this reply resolves your query!

[vivs]

Hello,

Thanks for your post.

If possible please post the complete masvc.log and mcscript.log file with the time stamp.

If possible please try to stop and start the ePO Services and check whether the machine is getting an update or unable to find valid repository.

Also is there any firewall or proxy available in between client and ePO.

Is there any Distributed Repository available?

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a solution" if this reply resolves your query!