I have the following questions regarding McAfee AV within an enterprise:
1. With regards to Faulty EndPoints:
1.1. If a McAfee EndPoint is faulty on a computer (laptop or desktop), what is the risk of running a machine with a faulty endpoint.
1.2. Will a computer with a faulty endpoint still update?
2. With regards to Dat File versions:
2.1 McAfee site use to keep a record on this link http://www.mcafee.com/apps/mcafee-labs/release-notes/datreadme.aspx, with this link I was able to use the drop down and see when a dat file was originally released. The site not longer works, where can I check now?
To Cover 1.1
If the Endpoint is not updating the DAT then its only marginally better than no AV at all.
Law #8: An out-of-date antimalware scanner is only marginally better than no scanner at all.
To Cover 1.2
If the update engine has failed it will not update, but the update engine is seperat to the scanning engine.
To Cover 2.1
McAfee deprecated this service some time ago, but you can sign up to the SNS service here: McAfee Support Subscription Center
Q1. With regards to Faulty EndPoints: If a McAfee EndPoint is faulty on a computer (laptop or desktop), what is the risk of running a machine with a faulty endpoint.
A1. Are you suggesting that the McAfee Agent is no longer communicating? If so, then you will not get updates, new tasks, or new policies. However, the security that the system had prior to loss of communication will remain the same until the communication issue is resolved. You may want to reach out to McAfee Support for help with the agent communication issues.