cancel
Showing results for 
Search instead for 
Did you mean: 
ddafty
Level 7
Report Inappropriate Content
Message 1 of 11

Problem ePO views

Hello,

We are working with VirusScan 8.0i and ePO 3.6.1 patch1.
We have a problem with some computers, when i launch epo console, search for a computer, on viruscan entreprise 8.0/general, it is displayed szdatdate, szengineversion, szhotix....
However it is displayed "szhotix -" instead of "szhotfix 16".

Thanks for your help.
10 Replies

RE: Problem ePO views

upgrade the agent, virusscan and ePo to latest patches and you might get rid of any spelling mistakes, otherwise just hold on happy
ddafty
Level 7
Report Inappropriate Content
Message 3 of 11

Problem ePo views

Thanks Medusoft for your reply,

agent version is 3.6.0.546, this the latest version we use.
I have tried to reinstall (successfully ePo agent), but problem is the same :
on ePO console : szhotfix - , instead of szhotfix 16.
I have checked the registry and hotfix is 16.
I have this problem with some computers, the rest (20000) are ok.
I tried to search on McAfee knowledge base but i found nothing.


Thanks for your help.
tonyb99
Level 13
Report Inappropriate Content
Message 4 of 11

RE: Problem ePo views

so some of your vse 8.0 machines are not showing the lastest hotfix 16 that you think is applied to them?

if you check the 2 keys below

szHotfixVersion = temporary value, patch deployment
szHotfix = reported patch version upon successful patch validation (via Property collection)

do they both agree?

if it wont show as having the patch installed after pulling full props then just get the pc to remove and reinstall vse.
ddafty
Level 7
Report Inappropriate Content
Message 5 of 11

problem ePO views

Hello,

I think you speak of registry keys, if it is the case, i haven't a szhotfix key.
In another computer which is ok (on epo console szhotfix 16) i can not find a registry key named szhotfix.
i have [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\ePolicy Orchestrator\Application Plugins\VIRUSCAN8000] HotFixVersions : 16

i have too [HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\VirusScan Enterprise\CurrentVersion]"Patch_16"="shcfg32.exe=F1,F3|naiavf5x.sys=F19|vsplugin.dll=F6|mcshield.exe=F4|bbcpl.dll=F2"

But no szhotfix.

Just a question : when it is displayed szhotfix on epo console, where did he find this information.

Thank you
tonyb99
Level 13
Report Inappropriate Content
Message 6 of 11

RE: problem ePO views

sorry misread something.
Smiley Tongue

the szhotfix in epo is created from validation of
[HKLM\Software\Network Associates\TVD\VirusScan Enterprise\CurrentVersion\Patch_x]
after successfull property collection from the agent

see here https://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=4777393&slice...
ddafty
Level 7
Report Inappropriate Content
Message 7 of 11

problem ePo views

thanks for all your response,

If i have understood, i just have to reinstall AV, no simple solution.Smiley Sad
tonyb99
Level 13
Report Inappropriate Content
Message 8 of 11

RE: problem ePo views

If the machine shows patch 16 in the about VSE then its installed, you could clear down the epo information placeholder entry (delete it) then wake the machine up (with full props) so it checks back in with new info.
If you still dont get patch 16 there in epo props then just tell machine to uninstall vse from epo then when its done this according to agent log tell it to reinstall again.
ddafty
Level 7
Report Inappropriate Content
Message 9 of 11

Problem ePO views

When i check Patch version via virusscan remote console, it is written none.
I don't know what to do...
tonyb99
Level 13
Report Inappropriate Content
Message 10 of 11

RE: Problem ePO views

if its none on the console then the patch hasnt validated so pull vse from that machine, reboot if possible and reinstall it.