cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 9
Report Inappropriate Content
Message 1 of 3

Agent is not sending threat events to ePO

Jump to solution

Hello,

We are having a problem the Agent is not sending threat events to ePO.
Wake-up call, policy  enforcing, deployment is working only the threat event sending from the agent to ePO / Agent Handler is not. We are having this issue only on one of our site in a specific network subnet. I am not a network expert but I'm suspecting this is caused by a network configuration. Any idea would be  appreciated. Thank you!

2 Solutions

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Agent is not sending threat events to ePO

Jump to solution

Please look into masvc.log on the client machine (C:\ProgramData\McAfee\Agent\logs) which you suspect that MA is not sending events.

View solution in original post

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: Agent is not sending threat events to ePO

Jump to solution

As Hem pointed out, the masvc log on the client will show whether it is sending events or failing.  That is located in c:\programdata\mcafee\agent\logs.

On the server side, you would look at the server log as well as the eventparser log.  Otherwise, if there is a proxy or firewall on that network segment between epo and that segment, have the network team check logs for any ssl or file type inspection.  

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

2 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: Agent is not sending threat events to ePO

Jump to solution

Please look into masvc.log on the client machine (C:\ProgramData\McAfee\Agent\logs) which you suspect that MA is not sending events.

View solution in original post

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 3

Re: Agent is not sending threat events to ePO

Jump to solution

As Hem pointed out, the masvc log on the client will show whether it is sending events or failing.  That is located in c:\programdata\mcafee\agent\logs.

On the server side, you would look at the server log as well as the eventparser log.  Otherwise, if there is a proxy or firewall on that network segment between epo and that segment, have the network team check logs for any ssl or file type inspection.  

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

View solution in original post

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community