cancel
Showing results for 
Search instead for 
Did you mean: 

VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

Hi. We have a strange situation. For first, configuration:

HP Proliant DL 360 G5

Windows Server 2008 SP2

VSE870P1 Engine 5301

All working good and any problem we have not.

Then we deside update McAfee software to Patch2 and problems is begin.

Windows 2008 SP2 servers start to Unexpected not responding.

System Log is clear, Application Log is clear but server not responding by IP and we nothing can do until hard reset system using HP ILO.

I think, that reason (may be) in Patch 2 with Engine 5301. May be we need update a engine to version 5400 to. Plaese, tell something about this problems? Someone have some problems like we are?

P.S. After a successful reboot the server the problem could be repeated two days later on the third.

Message was edited by: rbvadim on 11/16/09 1:43 AM
6 Replies
maziz
Level 10
Report Inappropriate Content
Message 2 of 7

Re: VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

Hi

Please can you disable the McAfee TDI Driver and confirm if the issue re-appears.

To disable the McAfee TDI Driver, please do the following:

  1. In Windows explorer, locate mfetdik.sys and rename this to mfetdik.old
    Default path C:\WINDOWS\system32\drivers
  2. Restart your computer. 
  3. Try to recreate your issue.

Does the issue still re-appear after 2-3 days?

Please let me know.

Highlighted

Re: VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

Ok. I`ll try, Thanks.

I understand it correctly, we are talking about KB50477: https://kc.mcafee.com/corporate/index?page=content&id=KB50477

Message was edited by: rbvadim on 11/16/09 4:09 AM
maziz
Level 10
Report Inappropriate Content
Message 4 of 7

Re: VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

Hi

Yes and No.

We are talking about KB66254 > Step 5

McAfee Employee wwarren
McAfee Employee
Report Inappropriate Content
Message 5 of 7

Re: VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

FYI, with VSE 8.7i if you want to test disabling of the McAfee TDI filter driver, you must rename the file \system32\drivers\mfetdik.sys and reboot.

The article referred to is for VSE 8.0i, a much older product and very different driver architecture.

William W. Warren | S.I.R.R. | Customer Success Group | McAfee

Re: VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

After a long test drive, everything works. But how much it reduces the network security?

McAfee Employee wwarren
McAfee Employee
Report Inappropriate Content
Message 7 of 7

Re: VSE870P2 and WinSrv2008SP2 - Unexpected Server "Error"

If disabling the mfetdik.sys driver has prevented the unresponsive symptom from occurring, it is recommended to ensure you have the latest drivers available for Windows 2008.

There are a number of updates to the TDX.sys driver (which is what the mfetdik.sys driver interacts with).

Once updated, you should enable the mfetdik.sys driver again and confirm if the issue is resolved.

If it occurs again, obtain a kernel or complete crash dump (not a mini dump) for investigation with McAfee Support.

By having the mfetidk.sys driver disabled you lose Port Blocking protection, a feature of Access Protection, and you lose the ability to identify the source IP address of a remote system that is trying to infect you.

William W. Warren | S.I.R.R. | Customer Success Group | McAfee
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community