cancel
Showing results for 
Search instead for 
Did you mean: 
mjmurra
Level 12
Report Inappropriate Content
Message 1 of 14

EPO 4.6 released

McAfee ePolicy Orchestrator (ePO) 4.6 is now available from the McAfee Download site at http://www.mcafee.com/us/downloads/

ePO 4.6 allows customers to further simplify and automate security management and align security management with the needs of the business. ePO 4.6 highlights include:

  • Streamlined installation and guided configuration wizard: deliver highly efficient enterprise-class security management to new small and medium-sized customers
  • Software Manager for direct access and check-in of product updates; eliminates download site visits
  • Client Tasks can now be managed just like policies: import, export and manage tasks or policies from a central catalog
  • Tag-Based Policy Assignment precisely targets assignment of pre-defined security profiles to systems based on their business role or at-risk status
  • Modified System Information view answers customers’ requests for a single screen showing properties and history of an endpoint
  • Streamlined dashboard management includes drag-and-drop editing, dynamic monitor resizing, and custom URLs, plus enhanced export features
  • Advanced reporting: provides report templates customized to a user’s company and personalized for various audiences
  • Customer Web APIs and python scripts: allow admins to build workflows that integrate security management into their business and automate repetitive tasks such as synchronizing endpoint information with other IT platforms; adding/deleting users; executing queries to integrate data with other tools; and adding data to ePO
  • Leveraging the McAfee user community admins can share best of breed dashboards, scripts, queries, and policies with their peers.
  • FIPS 140-2 level 2 validation: ePO 4.6 will be submitted for this high level security validation to support requirements of Federal customers and customers who do business with the government.

For more information, see KB71037 — ePO 4.6 Master list of release support articles: https://kc.mcafee.com/corporate/index?page=content&id=KB71037

13 Replies
psolinski
Level 10
Report Inappropriate Content
Message 2 of 14

Re: EPO 4.6 released

Before we upgrade our epo4.5 to 4.6 we have to wait for McAfee to provide support for McAfee Security for Mac (VirusScan for Mac), as it's not included in the initial release and we have a couple of Apple computers.

According to https://kc.mcafee.com/corporate/index?page=content&id=KB69814 Mac extensions will be released on 15th May.

PhilR
Level 12
Report Inappropriate Content
Message 3 of 14

Re: EPO 4.6 released

Unfortunately, productcatalog.mcafee.com does not resolve, so the automated task to download the software manager product list fails.

Program Files\McAfee\ePolicy Orchestrator\DB\SoftwareManager\debug\ProductList\licensed_products_list.xml.tmp contains

<?xml version="1.0" encoding="utf-8"?>

<SoftwareCatalogProducts xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">

  <ReturnCode>-1</ReturnCode>

  <Message>Error: The request channel timed out while waiting for a reply after 00:01:00. Increase the timeout value passed to the call to Request or increase the SendTimeout value on the Binding. The time allotted to this operation may have been a portion of a longer timeout.; Source: mscorlib; Exception: System.TimeoutException: The HTTP request to 'https://productcatalog.mcafee.com/WebServices/ProductCatalog/Products.asmx' has exceeded the allotted timeout of 00:01:00. The time allotted to this operation may have been a portion of a longer timeout. ---&gt; System.Net.WebException: The operation has timed out

   at System.Net.HttpWebRequest.GetResponse()

   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)

   --- End of inner exception stack trace ---

   at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)

   at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)

   at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)</Message>

  <LanguageHash>error</LanguageHash>

</SoftwareCatalogProducts>

Message was edited by: PhilR on 29/03/11 08:09:21 CDT

Message was edited by: PhilR on 29/03/11 08:09:40 CDT

Re: EPO 4.6 released

Hello

I have the following error then I want to download the software product list

3/29/11 1:16:50 PM  Started: Download Software Product List 
3/29/11 1:16:50 PM  Downloading product list. 
3/29/11 1:16:51 PM  Downloading file C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp. 
3/29/11 1:16:51 PM  Downloading file C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp. 
3/29/11 1:17:52 PM  Successfully downloaded file C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp. 
3/29/11 1:17:52 PM  Successfully downloaded file C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp. 
3/29/11 1:17:52 PM  There was an unknown error trying to download the file. 
3/29/11 1:17:52 PM  Downloading Translation Strings 
3/29/11 1:17:52 PM  Downloading file C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp. 
3/29/11 1:18:54 PM  Successfully downloaded file C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp. 
3/29/11 1:18:54 PM  There was an unknown error trying to download the file. 


0110329130946 I #03528 INETMGR  Session 1 ended, result=1
20110329130946 I #03528 SITEMGR  MirrorThreadProc: Mirror thread ended
20110329130946 x #03528 SITEMGR  SiteMgr main control final release...
20110329130946 I #03528 SITEMGR  Database Shutdown: Starting.
20110329130946 I #03528 SITEMGR  Database Shutdown: Succeeded.
20110329130946 I #03528 INETMGR  Database Shutdown: Starting.
20110329130946 I #03528 INETMGR  Database Shutdown: Succeeded.
20110329130946 I #03528 SITEMGRWRAP Database Shutdown: Starting.
20110329130946 I #03528 SITEMGRWRAP Database Shutdown: Succeeded.
20110329131651 I #03596 DOWNLOADJNI Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp.
20110329131651 I #03596 MCUPLOAD Connecting to server epo.mcafee.com through proxy server

20110329131651 I #03596 MCUPLOAD Successfully disabled CA trust options.
20110329131651 I #03088 DOWNLOADJNI Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp.
20110329131651 I #03088 MCUPLOAD Connecting to server epo.mcafee.com through proxy server

20110329131651 I #03088 MCUPLOAD Successfully disabled CA trust options.
20110329131752 I #03088 DOWNLOADJNI Finished Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp (1495 bytes).
20110329131752 I #03596 DOWNLOADJNI Finished Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp (1495 bytes).
20110329131752 I #00372 DOWNLOADJNI Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp.
20110329131752 I #00372 MCUPLOAD Connecting to server epo.mcafee.com through proxy server

20110329131752 I #00372 MCUPLOAD Successfully disabled CA trust options.
20110329131803 I #02792 EPOJNI   Getting license data...
20110329131803 I #02792 EPOJNI   Getting license data...
20110329131821 I #02792 EPOJNI   Getting license data...
20110329131821 I #02792 EPOJNI   Getting license data...
20110329131850 I #02792 EPOJNI   Getting license data...
20110329131850 I #02792 EPOJNI   Getting license data...
20110329131850 I #02792 EPOJNI   Getting license data...
20110329131854 I #00372 DOWNLOADJNI Finished Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp (1496 bytes).
20110329131903 I #02792 EPOJNI   Getting license data...

Regards

Adam

PhilR
Level 12
Report Inappropriate Content
Message 5 of 14

Re: EPO 4.6 released

Adam,

That's the same error as mine.

The xml file contents I listed are in "Program Files\McAfee\ePolicy Orchestrator\DB\SoftwareManager\debug\ProductList"

Cheers,

Phil

igor77
Level 7
Report Inappropriate Content
Message 6 of 14

Re: EPO 4.6 released

I got the same error and MyAvert update through our proxy didn't match anymore :

2011-03-29 17:44:58,626 ERROR [pool-7-thread-1] daemon.AvertService  - Exception while executing the AvertAlerts command

com.mcafee.orion.core.cmd.CommandException: POST Command got unexpected HTTP Status:407

PhilR
Level 12
Report Inappropriate Content
Message 7 of 14

Re: EPO 4.6 released

Apart from McAfee's DNS in dire need of an update so that productcatalog.mcafee.com resolves, the other thing to watch out for in ePO 4.6 is Client Tasks being disabled during the upgrade (including the RSD sensor deployment task on your RSD Sensor boxes).

I went through all my tasks, sanity-checked them, re-enabled them.

Although these are hassles we could do without, I like what I see so far.

Message was edited by: PhilR on 29/03/11 11:11:23 CDT

Message was edited by: PhilR on 29/03/11 11:11:50 CDT

Re: EPO 4.6 released

Hello PhilR,

I wanted to respond to a portion of your comment: >>ePO 4.6 Client Tasks being disabled during the upgrade (including the RSD sensor deployment task on your RSD Sensor boxes). I went through all my tasks, sanity-checked them, re-enabled them.<<

Only client tasks with the Schedule Type set to Run immediately prior to upgrade are disabled during/after an upgrade, for obvious reasons. The schedule for other tasks are not affected. All client tasks are deleted during upgrade and recreated upon first communication in order to comply with the new client task catalog paradigm.

FWIW, there is a default Server Task titled RSD: Update Sensor Deployment Client Tasks. That server task allows you to update RSD sensors in your environment to the latest version. It will turn the Schedule status attribute from Disabled to Enabled, then run the Sensor Deployment | Install RSD task.

FWIW, I reviewed the documentation and do not see that this information is called out. I will work with Support to get this codified in a KB article.

Re: EPO 4.6 released

PhilR,

I am responding to your post, although others posting on this thread also reported issues with the Software Manager. I believe these Software Manager connect problems experienced the day ePO was released have been resolved.

Just as an FYI for those of you that like to muck in the log files — the ePOApSvr.log file located in the <InstallFolder>\McAfee\ePolicy Orchestrator\DB\Logs folder will contain an entry that looks like this:

20110331005954          I          #06176          MCUPLOAD          Connecting directly to server epo.mcafee.com

epo.mcafee.com is the server that needs to be available to obtain Software Manager content. Further, your ePO server needs to be configured so that port 443 is enabled. The productcatalog.mcafee.com site mentioned in several posts and in the error messages is unfamilar to me. Perhaps it is part of a follow-on webservice component and not meant to be directly accessible by customers.

For folks that use proxies, I discovered during testing that the log entries "connecting directly to..." may not display; the issue has been submitted for consideration in the next release.

PhilR
Level 12
Report Inappropriate Content
Message 10 of 14

Re: EPO 4.6 released

Thanks for clearing up that.  I just took the name from the files left behind in the software catalog directory when they sync didn't work.

Sorry for any confusion caused.

It's all happy now.