cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 11 of 25

Re: How to update Linux Threat Prevention DAT files through ePO?

That is a local ENS task rather than an agent scheduled task.  You might need to get with the ENS team for troubleshooting that.  Have you tried running an epo scheduled task?

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Re: How to update Linux Threat Prevention DAT files through ePO?

I think the issue is there is a DAT file specifically for Linux clients that I would need to check in to ePO. I found it here:

http://update.nai.com/products/commonupdater/current/med_dat_1000/dat/0000/

When I download the zip file and attempt to check in to ePO it errors out saying a missing pkgcatalog.z file which is also on that same download page. Are there directions on how to check this in to ePO?

As of right now I have to manually update the DAT on each Linux machine:

https://kc.mcafee.com/corporate/index?page=content&id=KB88234

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 13 of 25

Re: How to update Linux Threat Prevention DAT files through ePO?

The epo master repository pull task should be pulling them in.  To download them manually to check into epo, you would get them from here - https://www.mcafee.com/enterprise/en-us/downloads/security-updates.html

The DAT Package For Use with McAfee ePO is what you would use to check in.  I know it says Windows, but the non-windows ens/vse uses same dat package.

So if the dats are in the repository and the Linux agent is not updating the system, then I would suggest open a ticket with McAfee so we can look at logs for you.

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Re: How to update Linux Threat Prevention DAT files through ePO?

Yep I checked in both of those and still doesn't work. From this post (https://community.mcafee.com/t5/Mac-and-Linux-Products/MEDDAT-pulled-into-ePO-repository/td-p/657018) it sounds like I need the MEDDAT file for Linux clients. There has to be an ePO compatible MEDDAT file somewhere. I did open a ticket and they are saying I need the MEDDAT file but I stated that the ePO server is in a standalone room so no internet access. Just waiting for their reply.  

LKS
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 15 of 25

Re: How to update Linux Threat Prevention DAT files through ePO?

Hi redwhite123,

MEDDAT is required for ENS 10.7 for Linux and MAC. Am trying to check in the Meddat zip file which i downloaded from the below location am getting the same error "Package missing required pkgcatalog.z file".

http://update.nai.com/Products/CommonUpdater/Current/MED_DAT_1000/DAT/0000

I will check internally and update you.

Re: How to update Linux Threat Prevention DAT files through ePO?

Thank you!

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 17 of 25

Re: How to update Linux Threat Prevention DAT files through ePO?

Here are a couple of different options you can do if ePO server is in a standalone room.  It would require opening firewall to the other source repository location from epo to the repo site.

1.  Follow KB82581 to use another epo server as a source repository for epo to pull the dats from.  That would contain all your required meddats as well as any other content updates needed.

2.  Set up a system that does have internet access with a mirror task - KB92427.  That would apply also to dats.  Use then that mirror location as source repository for epo to pull from

With both of those options, you would then be able to use epo as a repository for the clients to update from.

 

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

LKS
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 18 of 25

Re: How to update Linux Threat Prevention DAT files through ePO?

There is a workaround to check in MEDDAT file in to EPO MR. Follow the below steps, 

  1. Create a new Folder.
  2. Download “datdet.mcs”    file from “http://update.nai.com/products/commonupdater/current/med_dat_1000/ “ location an copy to the folder
  3. From http://update.nai.com/products/commonupdater/current/med_dat_1000/dat/0000/ location download last 35 Gem Files, extradat.mcs, meddatinstall.mcs, gdeltamed.ini, mediumdat-xxxx.zip, pkgcatalog.zip files.

 

  1. Make a ZIP of all these files and you can check in into EPO master repository for deployment.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Re: How to update Linux Threat Prevention DAT files through ePO?

I'm getting this error message when attempting to check in:

Unknown failure processing package

I've attached a screenshot of the zip file contents I created, I'm not sure if anything is missing.

 

mcafee.JPG

 

cdinet
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 20 of 25

Re: How to update Linux Threat Prevention DAT files through ePO?

Remove the replica.log and see if that helps.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community