I am relatively new to McAfee and have a question. When looking in ePO I have 25% of my clients not reporting their products or Agent version. ASC is happening on a regular basis, but the products are not showing or getting updated. If I log into these machines remotely and do a restart on them, all the products will then be reporting and showing in ePO. But everyday I come into work there are more having the same problem. I am attaching the agent and product manager logs for one of the 20 machines that are having this problem. The error occurs on 9/22 at 10:31 AM. I can see that the Product Manager restarts and then fails to start up again. The other machines have this Product Manager failure at different times of the day.
I am using the following products
Agent 4.8 patch 3
VSE 8.8 patch 9
HIPS 8.8 patch 8
Any help would be appreciated.
As per logs said, those machine have sequence number errors, it may they machine learn double MAC address via LAN or VPN etc.
Or do you using any HIPS network related policy in the setup ?
Thanks for taking a look. Can you explain what you mean about "HIPS network related policy in the setup?" Also I don't see what you are referencing in the logs.
All that I see is that all products are being updated at each ASCI until 9/22 @1031 AM. After that there are a lot of "Plugin registry change detected" messages until the end of the Agent Log. I am not seeing any sequence number errors.
My network is sequestered and not connected to the internet or any other network, and we do not use VPN, so I am not sure how it would get double MAC addresses. Is there somewhere I can check to see if that is the case?
Thanks again for getting me started on this problem
My clients are Win 10 Enterprise workstations and so Agent 5.0.4 would not work (KB88041), and I am in an environment that I cannot use the newest version of Agent until it is approved by my employer. So I am looking for a solution that will work with my current version of Agent.