cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
blewis
Level 9
Report Inappropriate Content
Message 1 of 3

For VSE 8.8, what are the major that causes DATs not to update and/or OAS to be disabled?

Recently, we had a large increase in the number of systems with old DATs (over 2% which is huge for us).  I also noticed many of them had OAS disabled. I downloaded and ran an XDAT on them, and it fixed about 75% of the problem systems. I also periodically force deploying the Agent on problem systems, which helps with a few, but the XDAT had a much bigger impact.

I want to run a current XDAT on systems with old DATs via SCCM at least once a month to reduce the number of systems we have to fix manually. But our Desktop Engineering group wanted to find out why we are continually seeing VSE breaking on workstations before we start this as a regular task.

What are some of the main things that cause VSE to have these types of issues (old DATs and/or OAS being disabled)?

What does the XDAT do, that sometimes fixes these symptoms?

We currently have all sorts of patch levels in our environment, but we are in the process of upgrading to Patch 8. 

Thanks!

2 Replies
McAfee Employee dvarnell
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: For VSE 8.8, what are the major that causes DATs not to update and/or OAS to be disabled?

One thing to keep in mind is that it is the McAfee Agent that performs the DAT update task.

That being said, some old versions of VSE such as 8.8 P4, you might see a situation where the DAT update task may run, but doesn't ever look to complete successfully because the McShield service doesn't get started, sometimes due to the McAfee Validation Trust Protection Service being in a "not started" or disabled state. This can happen for a few reasons, but typically it will be something like untrusted DLL injection or a failed patch update.

Your best bet on looking into why the DAT updates fail would be to investigate the logs found in %deflogdir%\updatelog.txt or Programdata\McAfee\Agent (or Common Framework)\logs\masvc.log and McScript.log.

blewis
Level 9
Report Inappropriate Content
Message 3 of 3

Re: For VSE 8.8, what are the major that causes DATs not to update and/or OAS to be disabled?

Thank you for your response!

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community