cancel
Showing results for 
Search instead for 
Did you mean: 

Re: Dropping Mapped drives while using Checkpoint VPN

Just so you know - - the Maroon Shield with the White "M" is always there - - when i put my mouse on top of it - - it says :   "McAfee status : OK' 

now the other one, i see when my PC is 1st starting up and it says  "OAS Enabled"  but it goes away and I never see it again - - except for the other day.   Now it may come up, that is just the 1st time I noticed it.

Next time I lose my drive mappings or connection to the AS400 I will lookin in the Agent Status Monitor screen and Cut N Paste what is going on for you all.  

Is there a setting in McAfee that will disconnect mapped drives after a specified time of inactivity ??

Thanks for your help

Mike

jguenrdc
Level 12
Report Inappropriate Content
Message 12 of 24

Re: Dropping Mapped drives while using Checkpoint VPN

On our Windows XP systems, the red, white, and blue shield always shows up for a few seconds when logging into Windows.  What happens is that VirusScan loads it's icon (the red, white, and blue one), then the Agent loads it's icon (red with white M).  The Agent is what communicates with the server and takes care of enforcing policies and scheduling scans, updates, etc.  There is a policy setting for the Agent that, if set, combines the menus from the VirusScan icon into the Agent icon and hides the VirusScan icon.  So I would say that sequence at login is normal, and probably doesn't have a direct relationship to the problem you are seeing.  Normally that VirusScan icon would not show up during a DAT update, but if VirusScan itself was updated, or the agent was updated, then it might.  Also, based on the log you posted, you have HIPS (Host Intrusion Protection) and SiteAdvisor installed, which may affect your connection.  I don't have any experience with those two products, so I can't say for sure or help you troubleshoot it.  If you (or your IT department) could look at the logs from each product (the log you posted is the Agent's log), you may find an entry indicating what is happening at the specific time the problem occurred.

Re: Dropping Mapped drives while using Checkpoint VPN

Agent Subsystem 6/21/2012 10:03:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:58:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:53:09 AM Info Agent is looking for events to upload

Scheduler 6/21/2012 9:52:33 AM Info Scheduler: Task [PW-HIPS Deployment (IN)] is finished

Scheduler 6/21/2012 9:52:33 AM Info The task PW-HIPS Deployment (IN) is successful

Updater 6/21/2012 9:52:27 AM Info Update Finished

Updater 6/21/2012 9:52:27 AM Info Verifying HIP_ClientDetect.mcs.

Updater 6/21/2012 9:52:27 AM Info Verifying HIP_ClientDetect.mcs.

Updater 6/21/2012 9:52:26 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:52:26 AM Info Extracting catalog.z.

Updater 6/21/2012 9:52:25 AM Info Verifying catalog.z.

Updater 6/21/2012 9:52:25 AM Info Initializing update...

Updater 6/21/2012 9:52:25 AM Info Checking update packages from repository IN-CAB.

Agent Subsystem 6/21/2012 9:52:25 AM Info Next policy enforcement in 15 minutes

Agent Subsystem 6/21/2012 9:52:25 AM Info Agent finished Enforcing policies

Management 6/21/2012 9:52:22 AM Info Enforcing Policies for SITEADV_3000

Management 6/21/2012 9:52:22 AM Info Enforcing Policies for EPOAGENT3000

Management 6/21/2012 9:52:22 AM Info Enforcing Policies for EPOAGENT3000META

Scheduler 6/21/2012 9:52:17 AM Info Scheduler: Invoking task [PW-HIPS Deployment (IN)]...

Scheduler 6/21/2012 9:52:17 AM Info Scheduler: Task [Deployment (WIND) 2] is finished

Scheduler 6/21/2012 9:52:17 AM Info The task Deployment (WIND) 2 is successful

Management 6/21/2012 9:52:05 AM Info Enforcing Policies for HOSTIPS_7000

Management 6/21/2012 9:52:05 AM Info Enforcing Policies for VIRUSCAN8800

Updater 6/21/2012 9:52:05 AM Info Update Finished

Updater 6/21/2012 9:52:04 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:52:04 AM Info Extracting catalog.z.

Updater 6/21/2012 9:52:04 AM Info Verifying catalog.z.

Updater 6/21/2012 9:52:04 AM Info Initializing update...

Updater 6/21/2012 9:52:03 AM Info Checking update packages from repository IN-CAB.

Scheduler 6/21/2012 9:52:02 AM Info Scheduler: Invoking task [Deployment (WIND) 2]...

Scheduler 6/21/2012 9:52:02 AM Info Added a new task PW-HIPS Deployment (IN) to Scheduler's task list 

Scheduler 6/21/2012 9:52:02 AM Info Scheduler: Task [Deployment - SiteAdvisor (WIND)] is finished

Scheduler 6/21/2012 9:52:02 AM Info The task Deployment - SiteAdvisor (WIND) is successful

Updater 6/21/2012 9:51:50 AM Info Update Finished

Updater 6/21/2012 9:51:50 AM Info Verifying SiteAdvisorDet-3.0.0.638.4.McS.

Updater 6/21/2012 9:51:50 AM Info Verifying SiteAdvisorDet-3.0.0.638.4.McS.

Updater 6/21/2012 9:51:49 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:51:49 AM Info Extracting catalog.z.

Updater 6/21/2012 9:51:49 AM Info Verifying catalog.z.

Updater 6/21/2012 9:51:49 AM Info Initializing update...

Updater 6/21/2012 9:51:48 AM Info Checking update packages from repository IN-CAB.

Scheduler 6/21/2012 9:51:47 AM Info Scheduler: Invoking task [Deployment - SiteAdvisor (WIND)]...

Scheduler 6/21/2012 9:51:47 AM Info Added a new task Deployment (WIND) 2 to Scheduler's task list 

Scheduler 6/21/2012 9:51:32 AM Info Added a new task Deployment - SiteAdvisor (WIND) to Scheduler's task list 

Management 6/21/2012 9:51:19 AM Info Enforcing Policies for McAfee Agent

Agent Subsystem 6/21/2012 9:51:19 AM Info Agent Started Enforcing policies

Agent Subsystem 6/21/2012 9:48:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:43:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:38:09 AM Info Agent is looking for events to upload

Scheduler 6/21/2012 9:36:27 AM Info Scheduler: Task [PW-HIPS Deployment (IN)] is finished

Scheduler 6/21/2012 9:36:27 AM Info The task PW-HIPS Deployment (IN) is successful

Updater 6/21/2012 9:36:23 AM Info Update Finished

Updater 6/21/2012 9:36:22 AM Info Verifying HIP_ClientDetect.mcs.

Updater 6/21/2012 9:36:22 AM Info Verifying HIP_ClientDetect.mcs.

Updater 6/21/2012 9:36:21 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:36:21 AM Info Extracting catalog.z.

Updater 6/21/2012 9:36:21 AM Info Verifying catalog.z.

Updater 6/21/2012 9:36:21 AM Info Initializing update...

Updater 6/21/2012 9:36:20 AM Info Checking update packages from repository IN-CAB.

Agent Subsystem 6/21/2012 9:36:19 AM Info Next policy enforcement in 15 minutes

Agent Subsystem 6/21/2012 9:36:19 AM Info Agent finished Enforcing policies

Management 6/21/2012 9:36:18 AM Info Enforcing Policies for SITEADV_3000

Management 6/21/2012 9:36:18 AM Info Enforcing Policies for EPOAGENT3000

Management 6/21/2012 9:36:18 AM Info Enforcing Policies for EPOAGENT3000META

Scheduler 6/21/2012 9:36:12 AM Info Scheduler: Invoking task [PW-HIPS Deployment (IN)]...

Scheduler 6/21/2012 9:36:12 AM Info Scheduler: Task [Deployment (WIND) 2] is finished

Scheduler 6/21/2012 9:36:12 AM Info The task Deployment (WIND) 2 is successful

Management 6/21/2012 9:36:01 AM Info Enforcing Policies for HOSTIPS_7000

Management 6/21/2012 9:36:00 AM Info Enforcing Policies for VIRUSCAN8800

Updater 6/21/2012 9:36:00 AM Info Update Finished

Updater 6/21/2012 9:35:59 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:35:59 AM Info Extracting catalog.z.

Updater 6/21/2012 9:35:59 AM Info Verifying catalog.z.

Updater 6/21/2012 9:35:59 AM Info Initializing update...

Updater 6/21/2012 9:35:58 AM Info Checking update packages from repository IN-CAB.

Scheduler 6/21/2012 9:35:57 AM Info Scheduler: Invoking task [Deployment (WIND) 2]...

Scheduler 6/21/2012 9:35:57 AM Info Added a new task PW-HIPS Deployment (IN) to Scheduler's task list 

Scheduler 6/21/2012 9:35:42 AM Info Added a new task Deployment (WIND) 2 to Scheduler's task list 

Scheduler 6/21/2012 9:35:42 AM Info Scheduler: Task [Deployment - SiteAdvisor (WIND)] is finished

Scheduler 6/21/2012 9:35:42 AM Info The task Deployment - SiteAdvisor (WIND) is successful

Updater 6/21/2012 9:35:30 AM Info Update Finished

Updater 6/21/2012 9:35:30 AM Info Verifying SiteAdvisorDet-3.0.0.638.4.McS.

Updater 6/21/2012 9:35:30 AM Info Verifying SiteAdvisorDet-3.0.0.638.4.McS.

Updater 6/21/2012 9:35:29 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:35:29 AM Info Extracting catalog.z.

Updater 6/21/2012 9:35:29 AM Info Verifying catalog.z.

Updater 6/21/2012 9:35:29 AM Info Initializing update...

Updater 6/21/2012 9:35:28 AM Info Checking update packages from repository IN-CAB.

Scheduler 6/21/2012 9:35:27 AM Info Scheduler: Invoking task [Deployment - SiteAdvisor (WIND)]...

Scheduler 6/21/2012 9:35:26 AM Info Added a new task Deployment - SiteAdvisor (WIND) to Scheduler's task list 

Management 6/21/2012 9:35:19 AM Info Enforcing Policies for McAfee Agent

Agent Subsystem 6/21/2012 9:35:19 AM Info Agent Started Enforcing policies

Agent Subsystem 6/21/2012 9:33:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:28:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:23:09 AM Info Agent is looking for events to upload

Scheduler 6/21/2012 9:20:25 AM Info Scheduler: Task [PW-HIPS Deployment (IN)] is finished

Scheduler 6/21/2012 9:20:25 AM Info The task PW-HIPS Deployment (IN) is successful

Updater 6/21/2012 9:20:22 AM Info Update Finished

Updater 6/21/2012 9:20:21 AM Info Verifying HIP_ClientDetect.mcs.

Updater 6/21/2012 9:20:21 AM Info Verifying HIP_ClientDetect.mcs.

Updater 6/21/2012 9:20:20 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:20:20 AM Info Extracting catalog.z.

Updater 6/21/2012 9:20:20 AM Info Verifying catalog.z.

Updater 6/21/2012 9:20:20 AM Info Initializing update...

Updater 6/21/2012 9:20:19 AM Info Checking update packages from repository IN-CAB.

Agent Subsystem 6/21/2012 9:20:19 AM Info Next policy enforcement in 15 minutes

Agent Subsystem 6/21/2012 9:20:19 AM Info Agent finished Enforcing policies

Management 6/21/2012 9:20:17 AM Info Enforcing Policies for SITEADV_3000

Management 6/21/2012 9:20:17 AM Info Enforcing Policies for EPOAGENT3000

Management 6/21/2012 9:20:17 AM Info Enforcing Policies for EPOAGENT3000META

Scheduler 6/21/2012 9:20:09 AM Info Scheduler: Invoking task [PW-HIPS Deployment (IN)]...

Scheduler 6/21/2012 9:20:09 AM Info Scheduler: Task [Deployment (WIND) 2] is finished

Scheduler 6/21/2012 9:20:09 AM Info The task Deployment (WIND) 2 is successful

Management 6/21/2012 9:19:59 AM Info Enforcing Policies for HOSTIPS_7000

Management 6/21/2012 9:19:59 AM Info Enforcing Policies for VIRUSCAN8800

Updater 6/21/2012 9:19:59 AM Info Update Finished

Updater 6/21/2012 9:19:57 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:19:57 AM Info Extracting catalog.z.

Updater 6/21/2012 9:19:57 AM Info Verifying catalog.z.

Updater 6/21/2012 9:19:57 AM Info Initializing update...

Updater 6/21/2012 9:19:56 AM Info Checking update packages from repository IN-CAB.

Scheduler 6/21/2012 9:19:54 AM Info Scheduler: Invoking task [Deployment (WIND) 2]...

Scheduler 6/21/2012 9:19:54 AM Info Added a new task PW-HIPS Deployment (IN) to Scheduler's task list 

Scheduler 6/21/2012 9:19:54 AM Info Scheduler: Task [Deployment - SiteAdvisor (WIND)] is finished

Scheduler 6/21/2012 9:19:54 AM Info The task Deployment - SiteAdvisor (WIND) is successful

Updater 6/21/2012 9:19:43 AM Info Update Finished

Updater 6/21/2012 9:19:43 AM Info Verifying SiteAdvisorDet-3.0.0.638.4.McS.

Updater 6/21/2012 9:19:43 AM Info Verifying SiteAdvisorDet-3.0.0.638.4.McS.

Updater 6/21/2012 9:19:42 AM Info Loading update configuration from: catalog.xml

Updater 6/21/2012 9:19:42 AM Info Extracting catalog.z.

Updater 6/21/2012 9:19:42 AM Info Verifying catalog.z.

Updater 6/21/2012 9:19:42 AM Info Initializing update...

Updater 6/21/2012 9:19:41 AM Info Checking update packages from repository IN-CAB.

Scheduler 6/21/2012 9:19:39 AM Info Scheduler: Invoking task [Deployment - SiteAdvisor (WIND)]...

Scheduler 6/21/2012 9:19:39 AM Info Added a new task Deployment (WIND) 2 to Scheduler's task list 

Scheduler 6/21/2012 9:19:24 AM Info Added a new task Deployment - SiteAdvisor (WIND) to Scheduler's task list 

Management 6/21/2012 9:19:23 AM Info Enforcing Policies for McAfee Agent

Agent Subsystem 6/21/2012 9:19:23 AM Info Agent Started Enforcing policies

Agent Subsystem 6/21/2012 9:18:09 AM Info Agent is looking for events to upload

Agent Subsystem 6/21/2012 9:13:09 AM Info Agent is looking for events to upload

Re: Dropping Mapped drives while using Checkpoint VPN

PATO,

I did not see the Shield pop-up this time, however I did lose my drive mappings, so I posted what was in that log for you to look at .... I hope this will help.

Mike

Highlighted
pato
Level 7
Report Inappropriate Content
Message 15 of 24

Re: Dropping Mapped drives while using Checkpoint VPN

I see that you also have SiteAdvisor and HIPS installed. I don't know those two parts of McAfee. Sorry can't help you here anymore. But it looks a little as if the WIND is getting installed again and again, but maybe that's also the normal behavior.

pato

Re: Dropping Mapped drives while using Checkpoint VPN

PATO

Is there a setting in McAfee that will disconnect all Mapped drives when a virus is found, an update to the agent has been installed or McAfee services has been stopped and restarted ??  

Thanks for your time and help,

Mike

pato
Level 7
Report Inappropriate Content
Message 17 of 24

Re: Dropping Mapped drives while using Checkpoint VPN

Darn cancel button, writing it agains :S

There is a setting to block all connections if a virus is found. It's in the settings of the On-Access Scan under General Settings - Blocking. No idea how the exact behavious is though.

The connections should not be disconnected if the McAfee Anti Virus engine gets restarted. I don't know how HIPS and SiteAdvisor behave, they might react different.

Re: Dropping Mapped drives while using Checkpoint VPN

PATO

2 questions for you :

1) The ON-ACCESS Scan - - those settings should / would only effect things if the user asked for a scan to be done, it would cause a problem with a schedule scan, correct ?? From what I can tell no viruses or problems have been detected on the PC.

2) Do you think I should start a NEW DISCUSSION about "how HIPS and SiteAdvisor behave"  with regards to the dropping of the mapped drives ??   You seem to be the only one responding here and thought maybe by putting a new discussion with a New title it may attract some interest or answer from others.

Thank you for taking the time to answer my questions

Mike

pato
Level 7
Report Inappropriate Content
Message 19 of 24

Re: Dropping Mapped drives while using Checkpoint VPN

Hi

1: It would only block the connection if something evil is found. On-Access is always running, that's the background part of McAfee.

2: I would recommend to open a case directly with Mcafee, they should be better able to helpl you.

pat

Re: Dropping Mapped drives while using Checkpoint VPN

Thanks for the recommendation to open a case directly with McAfee - - unfornately I am a consultant working for a company, so I cannot directly due it, however I will try to talk to the person in charge of the virus protection and see if thery will create a case for this.

Thank you for always replying, you have been a BIG help - - i was hoping others would join to either say - ' "YES"  i have a similar problem' or ' here is what your problem could be ' or  ' did u check this setting in HIP or Site Advisor ' .  You at least have me looking in a different area and trying new searches in the McAfee Support DB - I am myself have not found anything and what I have found, we / they dont have that product installed or if they do, they are not using that product. 

Thank You ' PATO ' for taking the time to respond!!!!

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator