cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
shocko
Level 9
Report Inappropriate Content
Message 1 of 7

Issues with Polices not Applying - KB81867

Guys, over the past 12 months since our upgrade to ePO 5.1 we have had numerous issues with policy changes not applying at the clients. We have engaged our vendor/reseller at length and they have not been able to identify the issue until recently. It seems that old polices not visible in the ePO interface are still applying. They are indicating to use that it looks like there is some corruption in the DB or the like but have not yet provided further detail. from a bit of searching I found this:

This KB strikes me as pretty alarming for a product of this nature.

6 Replies

Re: Issues with Polices not Applying - KB81867

Hello Shocko,

     Can you please give us more information about your environment?  What version of EPO are you running?  What VSE Extensions do you have installed?  What version of VSE is showing on the endpoint, when you check directly?  What version reports as installed in EPO?  What version of McAfee Agent is installed?  What operating systems are involved and is there a more common OS that this issue occurs with?  What specific policies are not getting enforced?  i.e. Do On Access Scan policies apply and Access Protection does not?

Can you please provide a screenshot of the following:  Find a system that is encountering this issue in EPO's system tree.  Place a check next to that system, then click Actions > Directory Management > View Assigned Policies.

shocko
Level 9
Report Inappropriate Content
Message 3 of 7

Re: Issues with Polices not Applying - KB81867

We have a call open with McAfee directly now so i will udpate with any details I get. Environment is:

  • Client systems running We have Windows 7/2008/2008 R2/2012 R2 and almost all are affected.
  • ePO server is 5.1
  • Client have Agent 4.5 - 5.1 and VSE 8.8 Patch 4
  • Specifically what we find is that if we modify a policy to add/remove VSE on-access scanning exceptions, they do not apply at the client.

Re: Issues with Polices not Applying - KB81867

That last step will show you if EPO thinks it is applying the policy.  When MA gets the policy catalog from EPO, it is supposed to send back a flag to EPO that states whether or not the policies have been applied.  Thats why I like that view, opposed to "View Policies on a Single System"

shocko
Level 9
Report Inappropriate Content
Message 5 of 7

Re: Issues with Polices not Applying - KB81867

shocko
Level 9
Report Inappropriate Content
Message 6 of 7

Re: Issues with Polices not Applying - KB81867

6 months on and we are dealing direct with McAfee and yet to get an answer on this

Re: Issues with Polices not Applying - KB81867

I am trying to think what we did to resolve the issue.  Yeah, its been a few months since.  I want to say we either upgraded the MA extension, Upgraded MA to the latest, reinstalled VSE, and/or upgraded to ENS.  As of today, this is no longer an issue.

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community