cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
darren
Level 7
Report Inappropriate Content
Message 1 of 4

Packaging ePO agent and VSE 8.7i for imaging multiple computers

I have packaged the ePolicy Agent 4.5 and it communicates with the server just fine.  I was wondering if anyone knew of a way to package the agent and VSE 8.7i  so the computer would not be vunerable during the time that it updates from the Client Task Scheduler.  I have packaged them both but VSE 8.7i does not update until the Client Task is scheduled to run.  I have found a work around and it is deploying VSE 8.7i through an image first and then deploying ePolicy Agent 4.5 after that, the down fall to this is that I have to click on the McAfee Agent Monitor and enforce the policy to run or wait until it is scheduled to run.  I am using Altiris to image the new computers.  Thanks for the help.

3 Replies
apoling
Level 14
Report Inappropriate Content
Message 2 of 4

Re: Packaging ePO agent and VSE 8.7i for imaging multiple computers

Hi,

This may work:

use McAfee Installaton Designer 8.7 and a current copy of framepkg.exe that you obtained from ePO Master repository to produce a custom VirusScan installation package.

(ID 8.7 has an option to embed framepkg.exe as well as any VSE patch, new DAT, etc.)

Edit VirusScan AutoUpdate task schedule in ID so that it updates "when Idle" or "At Logon", etc.

Check the box near the end during ID configuration that says: "Update VirusScan Enterprise at the end of installation".

Use this custom VirusScan install set when preparing your image.

When you install VirusScan onto the image workstation/server, VirusScan will update itself due to the checkbox above and due to the valid sitelist that framepkg.exe has within. If you burn the image later on workstations, standard AutUpdate updates according to the setting above. When MA enforces ePO update task, that one will update.

Do not forget to delete AgentGUID regkey after VirusScan installation as the very last step in image preparation.

NB: Installation Designer must be run on a host that has Virusscan Enterprise 8.7 installed and managed.

Attila

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: Packaging ePO agent and VSE 8.7i for imaging multiple computers

This won't work, I'm afraid. It used to work with CMA 3.6, but MA4 and above are MSI packages, as is VSE - and the MSI won't allow two packages to run at the same time, so you can't call an MSI install from inside another.

I think there used to be an article about this but I can't find it at the moment - I'll see if I can track it down.

Regards -

Joe

Re: Packaging ePO agent and VSE 8.7i for imaging multiple computers

In your Altiris package you can add a command line execute to force the agent to wake up and check in at the end of the install.

<agent install directory>\cmdagent /p /e /c

We run this to force the agent to wake up and get all its policies immediately after the install of each mcafee product (siteadvisor, HIPS, and AV). Seems to work fine.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator