FrameworkService.exe & MfeServiceMgr.exe - What exactly are these?

[mcvoodoo]

So I know they're part of the McAfee Agent, but I'm trying to understand what each component is responsible for for and, more specifically, why they both appear to require a rule defining in the local Firewall rule set?

Anyone know for definite what each process does?

Thanks

[tao]

FrameworkService.exe: A component of ePO providing the majority of MA functionality/communication (Policies, Tasks, Updates) between the node and the ePO server.  MfeServiceMgr.exe: Service for relay capability on the client.

[mcvoodoo]

Hi Tao,

I understand the description of FrameworkService.exe (this confirms my understanding) but I'm afraid I'm not clear on what "Service for relay capability on the client" actually means in practise for MfeServiceMgr.exe.

Could you (or any one else elaborate) please?

Thanks

[tao · Accepted solution]

A McAfee Agent with relay capability can access the McAfee ePO server, Agent handler, or the distributed repository listed in SiteList.xml. A McAfee Agent discovers each RelayServer in the network at every agent-server communication, and caches details on the first five unique servers to respond.

If the connection fails or the required content update isn't available, the McAfee Agent connects to the first RelayServer in its cached list. When a McAfee Agent uses relay to communicate with the McAfee ePO server, the connections are established in two parts; first between the McAfee Agent and the RelayServer, and second between the RelayServer and the McAfee ePO server. These connections are maintained during the communication.

Relay capabilities can be configured through the Agent General policy under the SuperAgent tab. 

[mcvoodoo]

Thanks for the detailed response Tao.  Exactly what I was looking for.