cancel
Showing results for 
Search instead for 
Did you mean: 
Pmaquoi
Level 10

EPO 5.1 repost 2 doesn't correct the wrong extension detection

after a rollback, i've checked all my extension versions for the product that were in conflict

Move, Real time en Data center Connector are present in the compatibility list mentionned in the last SNS Message and the  version number is ok

Policy audiitor is still missing from the compatibility list

so if i launch the setup, heire is the result

epo511.png

epo512.png

The rea ltime for example is up to date with the last extension

epo513.png

SO MCAFEE WHAT NEXT ? A REPOST 3 NOW ?

Ce message a été modifié par: Pmaquoi on 8/11/13 6:26:31 CST
0 Kudos
10 Replies
mkeys
Level 7

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

Hi Pmaquoi,

You are pointing out a wonderful example of how quickly the compatibility of products can change.  For the list that was packaged with the ePO repost, this is the expected product compatibility.

Since the time of creating that ePO package with included product compatibility list, product compatibility has changed, specifically in the case of Real Time.

My question to you is whether you arrived at this Product Compatibility Check dialog during the use of the Upgrade Compatibility Utility or through the ePO installer via the upgrade?

Upgrade Compatibility Utility:

If using the Upgrade Compatibility Utility, McAfee recommends that you leave the checkbox checked for the "Automatic retrieval of Product Compatibility List" setting.  With an active Internet connection, this should always use the newest product compatibility list available when performing the compatibility check.

If this setting was enabled, and you still received the Product Compatibility Check dialog you posted, then it appears you are unable to access the site hosting the latest product compatibility list.

If an active Internet connection is not available where the utility is being run from, then the list will need to be manually retrieved.  If an active Internet connection should be available, the environment may need to be configured to allow access to the below site.

The list can be found here:

https://epo.mcafee.com/productcompatibilitylist.xml

For the utility, downloading this hosted list can be used to replace the list that is currently present in the utility directory.

ePO Installer via the Upgrade:

If the posted dialog was seen during the upgrade, please note that by default, the installer will go and try to retrieve the hosted file.  If an active Internet connection is not available or connection to the above site is blocked, then the installer will revert to the packaged list.

In the case that the connection is being blocked to the site, environment should be configured to allow the connection.  If an active Internet connection is not available, then there is an available command line option to use a different product compatibility list than the one package with ePO.

The ePO 5.1 Product Guide contains the following section that details out the command line operators:

Software Manager > Check Product Compatibility > Command lone options for installing the Product Compatibility List

Hopefully one of these solutions will allow you to use the latest product compatibility list when either evaluating your upgrade via the utility or performing the upgrade itself.

- Matthew

Message was edited by: mkeys on 11/8/13 2:20:17 PM PST
0 Kudos
Pmaquoi
Level 10

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

during the epo installer

upgrade from a 5.0.1 (not a 5.0) to a 5.1 so i have no use of the compatibility tools

All product are compatible for 5.0.1. I use the big enterprise suite with 15-20 product installed into the ePO..

For example Policy Auditor is comptaible 5.X since less than two monthes (around 9 september ?). I waited this extensions during 10 monthes and now it could be incompatible ?

Real time is up te date as the last update is veryr recent (some days ago i think ?)

Move 3 can't be more up to date

All these extensons are present into the compatibility list mentionned into the KB.

There is no excuse, this release is a totally mess.

As i write these lines i'm discovering that a patch is announced for the compatibility of the agent 4.8 for the 15 november because there is critical trouble with it. That's the last piece of wood on the grave.

If i can resume : We can upgrade to the repost 2 but we could have trouble with 4.8 agent, We can forget our GTI proxy (date TBD), but it's normal.

Please McAfee, take out this repost 2, take one or two monthes to rebuild it and come back with a correct version. The Beta refresh version works better than this RTW.

So one year after the inittial launch, it still impossible to put the 5.X into production (and i need it for EMM next year. The 11th version works better on a 5.X than a 4.6). i won't put in production the 5.0.1 because i'm afraid of the stability for future upgrade as i see what's happening now with the 5.1 release

Ce message a été modifié par: Pmaquoi on 8/11/13 16:24:25 CST

Ce message a été modifié par: Pmaquoi on 8/11/13 16:31:53 CST
0 Kudos
BillyG
Level 7

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

Hi Pmaquoi,

Please let us know when you have tried Matthew's steps above for using the latest downloaded product compatibility list with the installer.  As he mentions, it looks like your ePO server was unable to reach the URL he listed during upgrade.

Thanks,

Billy

0 Kudos
Pmaquoi
Level 10

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

i'm gonna try it again to be sure it's not the reason. i'm pretty sure that the internet connection was on because i've downloaded the package with my grant from this server. i'll try it today and post the result

0 Kudos
Pmaquoi
Level 10

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

Check done this morning

full internet access and still the same trouble but today with a less number of extension. this time real time 1.0.3 is ok

As i have discovered that ePO 5.1 has now communication trouble with 4.8 agent also (we have to wait a patch for this) and as all my thousands computers and servers are on this version (i m always up to date) i have decided to cancel any update during 6 month. I will wait to see some change around McAfee RTW cycle because actually i do not have faith in it anymore. I'll forget the 5.x epo world and stay in 4.x.

"Secure By design" as it has been told  us in the last summit. Sorry but it's time to renew this sentence

This close this case for me.

thanks for the help

0 Kudos
mkeys
Level 7

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

Outside of Real Time, all other products in your posted screenshot are currently marked as incompatible. ePO is constantly trying to improve the nature of its security, many times these changes cannot be handled in the ePO product itself, and point products need to make updates or check that their current extension meets the new requirements. If point products have not made the necessary changes to meet the requirements or vetted their current extension against the new requirements, then the point product will remain incompatible.

The reason the point products were compatible during Beta was to allow customers to test with these products whether or not those products worked correctly with the new ePO requirements.

It is the choice of the point products to decide whether they will make the necessary changes or perform the necessary testing to be compatible with the latest ePO within their release cycle.

So for any point product in that incompatible list that you would like to see supported in ePO 5.1, please work with your point product representatives to champion them to be compatible.

In regards to the agent communication issue, the issue is only with URL deployed agents. The following KB article details out the issue, a workaround, and the planned remediation:

https://kc.mcafee.com/corporate/index?page=content&id=KB79715

0 Kudos
Pmaquoi
Level 10

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

This information is not exactly correct

Policy auditor 6.0.2 is compatible with 5.0 and 5.0.1 EPO production version since september

Data center connector too

Initial Compatibility for Policy Auditor for EPO 5.X 16 semtember 2013

If you want to resolve security flaws -> go to EPO 5.1 almost 7 weeks later

Then Policy Auditor is no more compatible

Following your advice " ...please work with your point product representatives to champion them to be compatible..." seems to me a very strange argument in that case.

Am i responsable of the fact that McAfee can't maintains an extension more than one minor version of EPO ?

It's like every one is coding in its corner without even having an eye on what others do.

So i have to choose to stay on 5.0.1 with its leaks or upfating to a more secure epo but without the product i buy ? And i have to make a request for this by myself to McAfee ? I need to champion them ?

Sorry for my english but this position is simply inacceptable.

if you release an upgrade version of a product, especially for security purpose, you need to be able to manage the product your custiomers uses in it in a decent delay..

This is frustating

I was awaiting since March to put all my computers and serveurs on automatic auditing with the the policy auditor produict on a 64 bits epo server. (and also integrating Move with the data center connector)

Since September, i've prepared everything, as the extension has been published but now Mcafee advice us to upgrade on a P.A. non supported epo version, 7 weeks after.

One last thing : Something Strange

5.1 is a new version, not clearly an upgrade of the 5.0 / 5.0.1 if i look on my download account

Why ? they were a so bad version ? they were coded by another team ? it could explain the lack of communication around extension compatibilty !

Ce message a été modifié par: Pmaquoi on 11/11/13 15:30:04 CST

Ce message a été modifié par: Pmaquoi on 11/11/13 15:31:35 CST
0 Kudos
konecnym
Level 9

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

1)  The same situation is with Application Control 6.1.2 (not supported in ePo 5.1    :-(   ???
Maybe in  McAfee is some bad communication between their teams.

We made rollback to "old" ePo 5.0.1.

2) Where is support new OS ?
     1 yer delay in Windows 8 (VS, P3 + HIPS 8.0 P3, GTI, SIR, DeepCommand ...)

     Today isn´t supported HIPS in Windows 8.1  :-(

BIG :-(

0 Kudos
pboedges
Level 10

Re: EPO 5.1 repost 2 doesn't correct the wrong extension detection

Download the ProductCompatibilityList.xml from the link provided by MKEYS, and execute the setup with the following commandline string

Setup.exe DISABLEPRODCOMPATUPDATE=1 PRODCOMPATXML=<path toproductcompatibilitylist>

I had a similar issue and this is what fixed it for me.

0 Kudos