cancel
Showing results for 
Search instead for 
Did you mean: 
jround
Level 9
Report Inappropriate Content
Message 1 of 5

Agent Upgrade via client task - Laptops duplicating

Pushing out McAfee Agent 5.6.1.157 via a client task assignment I have noticed that quite a lot of systems are creating duplicate entries in ePO, in particular laptop devices.

The problem is we manually tag them for encryption purposes (I am in the middle of changing that to a more automated process) so if a device does have a new entry created I have to go through the 'Duplicate Systems' report and match up the tags with the old entry which is no longer communicating

However this does not affect all laptops, I have done around 500 and only had the issue on around 50 so far, potentially the users are roaming around a bit so may be continually hitting new IP addressing but the mac address for both entries is exactly the same which I thought ePO now looked at rather than IP?

Looking at the logs for one it does seem to suggest the Agent has reinstalled itself rather than upgrading too

4 Replies
McAfee Employee hem
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Agent Upgrade via client task - Laptops duplicating

Can you share the steps you are following to upgrade MA via client task? I tried with product deployment but couldn't reproduce it.

Was my reply helpful?

If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?please select Accept as Solution in my reply and together we can help other members?
McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 3 of 5

Re: Agent Upgrade via client task - Laptops duplicating

By any chance did you add forceinstall to the command line for the agent deployment task? 

Also, are these laptops connecting via vpn?  If so, have you ensured to follow kb52949?  That doesn't usually cause duplicates, but could have some strange effects. 

What version of epo?  Do you use AD sync and have you noticed if they come in duplicate after an AD sync?

The frminst log will show if there was any forceinstall done for any reason.  If so, then yes, that would create duplicates.  See KB86879 for that.  If there was a forceinstall and your client task is not set to run it that way, then I would check time frames that the agent was reinstalled - does it match the task runtime?  If not, is there anything in the server task log suggesting someone may have run deploy agent to it?

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

jround
Level 9
Report Inappropriate Content
Message 4 of 5

Re: Agent Upgrade via client task - Laptops duplicating

I cannot find anything consistent as to why some systems duplicate at the moment, not specifying /forceinstall or anything in the task, maybe I just need to upgrade ePO from 5.9.1 to 5.10 at some point

I have also noticed a far more alarming issue in that a number of clients seem to be in a 'zombie' state in ePO, they report as last communicated last month yet when I checked they are actually online live clients!  Deploying the latest Agent 5.6.1 as a force over the top install seems to bring them back to life in ePO but a bit worrying!

McAfee Employee cdinet
McAfee Employee
Report Inappropriate Content
Message 5 of 5

Re: Agent Upgrade via client task - Laptops duplicating

For agent communication issues, the masvc log on the client will show specific failures.  You need to match that time frame of the communication attempt to the server or agent handler server logs for same time frame.  There are 2 ways communication can fail.

1. server never receives the agent communication attempt to log it - can occur if client can't reach server, ssl communication is rejected (wrong certificate, firewall doing ssl inspection, etc) or other network issues.

2. Client reaches server, but server is either busy, rejects it for some reason - the server log would show that.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community