cancel
Showing results for 
Search instead for 
Did you mean: 

Problems deploying VirusScan 8.7 patch 5

Jump to solution

Hello

I've recently taken over admin of an EPO version 4.0 server which had fallen into disrepair a bit.  I'm mostly new to this and need some assistance.  The clients are Windows 7 and are all running VirusScan 8.7i patch 4, and as such are failing to update the engine to version 5600.  I understand that I need to update clients to patch 5, then hotfix 777352.  However, I'm having some trouble doing this via the EPO server.  I've uploaded patch 5 to the repository, and as all clients should update DATs, engine & product updates on startup, I was hopeful that I should see clients updating to patch 5, but the logs are giving me this on at the first two machines that I've looked at:

18 June 2015 12:39:33

Info

Scheduler

Scheduler: Invoking task [Update at Startup task]...

18 June 2015 12:39:33

Info

Agent

Agent will connect to Server in randomized 10 minutes interval

18 June 2015 12:39:33

Info

Agent

Next policy enforcement in 30 minutes

18 June 2015 12:39:33

Info

Agent

Agent will connect to Server in : 3 minutes and 8 seconds

18 June 2015 12:39:33

Info

Updater

Checking update packages from repository ePO_AHLSOUAV1.

18 June 2015 12:39:34

Info

Updater

Initializing update...

18 June 2015 12:39:34

Info

Updater

Downloading catalog.z.

18 June 2015 12:39:34

Info

Updater

Verifying catalog.z.

18 June 2015 12:39:34

Info

Updater

Extracting catalog.z.

18 June 2015 12:39:34

Info

Updater

Loading update configuration from: catalog.xml

18 June 2015 12:39:35

Info

Updater

These updates will be applied if they are in the repository: Engine, DAT, VIRUSCAN8700.

18 June 2015 12:39:35

Info

Updater

Downloading PkgCatalog.z.

18 June 2015 12:39:35

Info

Updater

Verifying PkgCatalog.z.

18 June 2015 12:39:35

Info

Updater

Extracting PkgCatalog.z.

18 June 2015 12:39:35

Info

Updater

Loading update configuration from: PkgCatalog.xml

18 June 2015 12:39:36

Info

Updater

Verifying V2engdet.mcs.

18 June 2015 12:39:36

Info

Updater

McAfee VirusScan Enterprise Workstation has been reached to end of life.

18 June 2015 12:39:36

Info

Updater

Update failed to version 5700.7163.

18 June 2015 12:39:36

Info

Updater

Product(s) running the latest Engine.

18 June 2015 12:39:36

Info

Updater

Downloading PkgCatalog.z.

18 June 2015 12:39:36

Info

Updater

Verifying PkgCatalog.z.

18 June 2015 12:39:36

Info

Updater

Extracting PkgCatalog.z.

18 June 2015 12:39:36

Info

Updater

Loading update configuration from: PkgCatalog.xml

18 June 2015 12:39:37

Info

Updater

Verifying V2datdet.mcs.

18 June 2015 12:39:37

Info

Updater

Product(s) running the latest DATs.

18 June 2015 12:39:37

Info

Updater

Verifying VSE870Det.mcs.

18 June 2015 12:39:37

Info

Updater

Downloading VSE870Det.mcs.

18 June 2015 12:39:38

Info

Updater

File VSE870Det.mcs is corrupt. Downloading complete file again.

18 June 2015 12:39:38

Info

Updater

Error occurred while verifying VSE870Det.mcs.

18 June 2015 12:39:38

Info

Updater

Updates were not applied because the update process encountered an unknown error: VIRUSCAN8700.

18 June 2015 12:39:40

Info

Updater

Update Finished

18 June 2015 12:40:18

Info

Updater

Checking update packages from repository McAfeeHttp.

18 June 2015 12:40:18

Info

Updater

Initializing update...

18 June 2015 12:40:18

Info

Updater

Downloading catalog.z.

18 June 2015 12:40:18

Info

Updater

Verifying catalog.z.

18 June 2015 12:40:18

Info

Updater

Extracting catalog.z.

18 June 2015 12:40:18

Info

Updater

Loading update configuration from: catalog.xml

18 June 2015 12:40:19

Info

Updater

These updates will be applied if they are in the repository: Engine, DAT, VIRUSCAN8700.

18 June 2015 12:40:19

Info

Updater

Downloading PkgCatalog.z.

18 June 2015 12:40:19

Info

Updater

Verifying PkgCatalog.z.

18 June 2015 12:40:19

Info

Updater

Extracting PkgCatalog.z.

18 June 2015 12:40:19

Info

Updater

Loading update configuration from: PkgCatalog.xml

18 June 2015 12:40:20

Info

Updater

Verifying V2engdet.mcs.

18 June 2015 12:40:20

Info

Updater

McAfee VirusScan Enterprise Workstation has been reached to end of life.

18 June 2015 12:40:20

Info

Updater

Update failed to version 5700.7163.

18 June 2015 12:40:20

Info

Updater

Product(s) running the latest Engine.

18 June 2015 12:40:20

Info

Updater

Downloading PkgCatalog.z.

18 June 2015 12:40:20

Info

Updater

Verifying PkgCatalog.z.

18 June 2015 12:40:20

Info

Updater

Extracting PkgCatalog.z.

18 June 2015 12:40:20

Info

Updater

Loading update configuration from: PkgCatalog.xml

18 June 2015 12:40:21

Info

Updater

Verifying V2datdet.mcs.

18 June 2015 12:40:21

Info

Updater

Product(s) running the latest DATs.

18 June 2015 12:40:21

Info

Updater

Verifying VSE870Det.McS.

18 June 2015 12:40:21

Info

Updater

Downloading VSE870Det.McS.

18 June 2015 12:40:22

Info

Updater

File VSE870Det.McS is corrupt. Downloading complete file again.

18 June 2015 12:40:22

Info

Updater

Error occurred while verifying VSE870Det.McS.

18 June 2015 12:40:22

Info

Updater

Updates were not applied because the update process encountered an unknown error: VIRUSCAN8700.

18 June 2015 12:40:24

Info

Updater

Update Finished

18 June 2015 12:40:24

Info

Updater

Unable to find a valid repository.

Am I going wrong somewhere? 

Any assistance would be much appreciated.

Thanks

Paul

1 Solution

Accepted Solutions

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

McAfee KnowledgeBase - VirusScan Enterprise 8.7i Patch 5 and Hotfix 982564 are required for VirusSca...

I have found this KB. This should solve this issue.

To install the hotfix on VSE 8.7i Patch 5, extract VSE870HF982564.Zip and either run the hotfix directly on a client or deploy it through ePolicy Orchestrator (ePO).


Greetings

12 Replies
exbrit
Level 21
Report Inappropriate Content
Message 2 of 13

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Moved to VSE for a faster response.

---

Peter

Moderator

exbrit
Level 21
Report Inappropriate Content
Message 3 of 13

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Correction, ePO is a better spot so have moved it there.

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Hi ptulloch,

As far as I can see, you are trying to update the current installation of the VSE 8.7i Patch 4 to Version 8.7i Patch 5. Did you install the 8.7i Patch 5 Repost Patch (full install of the 8.7i) or just the patch itself?

If you have the repost patch mapped into the epo, I would suggest uninstalling the old VSE 8.7i Patch 4 before and then install the patch 5. This can be done in one task.

Afterwards, make a hotfix update task for the VSE.

Later on, you should be able to update to the latest Engine.

You should also check, if there are any integrity issues on the repository server, where your client is getting the updates from. Check the location where you are deploying the updates to (ftp://servername/Current) and delete the VIRUSCAN8700 directory from the ftp. Go then to the Master Repository and let the master replicate to the repositories again. By doing this, you make sure, that you have the updated packages.

Greetings

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Thanks also to g33k2303, looks like you and Richard are guiding me in the right direction.

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Hello

I'm not sure what changed but the clients started updating to patch 5 without me needing to remove and replace using the repost.  Anyway, that's all good so I uploaded the hotfix to the repository as well, and the clients are now picking that up.  However, they don't seem to be installing the latest version of the engine still.  Example of client log:

22 June 2015 10:29:02

Info

Scheduler

Scheduler is now running

22 June 2015 10:29:02

Info

Scheduler

Scheduler: Invoking task [Update at Startup task]...

22 June 2015 10:29:02

Info

Agent

Agent will connect to Server in randomized full ASCI interval : 3600 seconds

22 June 2015 10:29:02

Info

Agent

Next policy enforcement in 30 minutes

22 June 2015 10:29:02

Info

Agent

Agent will connect to Server in : 29 minutes and 8 seconds

22 June 2015 10:29:16

Info

Updater

Checking update packages from repository ePO_AHLSOUAV1.

22 June 2015 10:29:16

Info

Updater

Initializing update...

22 June 2015 10:29:16

Info

Updater

Verifying catalog.z.

22 June 2015 10:29:16

Info

Updater

Extracting catalog.z.

22 June 2015 10:29:16

Info

Updater

Loading update configuration from: catalog.xml

22 June 2015 10:29:17

Info

Updater

These updates will be applied if they are in the repository: Engine, DAT, VIRUSCAN8700.

22 June 2015 10:29:17

Info

Updater

Downloading PkgCatalog.z.

22 June 2015 10:29:17

Info

Updater

Verifying PkgCatalog.z.

22 June 2015 10:29:17

Info

Updater

Extracting PkgCatalog.z.

22 June 2015 10:29:17

Info

Updater

Loading update configuration from: PkgCatalog.xml

22 June 2015 10:29:18

Info

Updater

Verifying V2engdet.mcs.

22 June 2015 10:29:18

Info

Updater

McAfee VirusScan Enterprise Workstation has been reached to end of life.

22 June 2015 10:29:18

Info

Updater

Update failed to version 5700.7163.

22 June 2015 10:29:19

Info

Updater

Product(s) running the latest Engine.

22 June 2015 10:29:19

Info

Updater

Downloading PkgCatalog.z.

22 June 2015 10:29:19

Info

Updater

Verifying PkgCatalog.z.

22 June 2015 10:29:19

Info

Updater

Extracting PkgCatalog.z.

22 June 2015 10:29:19

Info

Updater

Loading update configuration from: PkgCatalog.xml

22 June 2015 10:29:20

Info

Updater

Verifying V2datdet.mcs.

22 June 2015 10:29:20

Info

Updater

Product(s) running the latest DATs.

22 June 2015 10:29:20

Info

Updater

Verifying VSE870Det.mcs.

22 June 2015 10:29:20

Info

Updater

Searching available updates for McAfee VirusScan Enterprise 8.7.0.

22 June 2015 10:29:20

Info

Updater

Product(s) running the latest HotFix 5.

22 June 2015 10:29:20

Info

Updater

Product(s) running the latest HotFix 777352.

22 June 2015 10:29:22

Info

Updater

Update Finished

Should I persist with this, or does it make more sense to simply move on to VirusScan v8.8?

Thanks in advance for any assistance.

Paul

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

McAfee KnowledgeBase - VirusScan Enterprise 8.7i Patch 5 and Hotfix 982564 are required for VirusSca...

I have found this KB. This should solve this issue.

To install the hotfix on VSE 8.7i Patch 5, extract VSE870HF982564.Zip and either run the hotfix directly on a client or deploy it through ePolicy Orchestrator (ePO).


Greetings

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Ah, thanks g33k2303

I had been working from an older KB which referred to a hotfix needed to install engine version 5600.  I hadn't realised that there was a newer hotfix for 5700.  I'll give this a try.

Paul

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

I think this is working - thanks. 

What are your thought about the upgrade to v8.8?

Re: Problems deploying VirusScan 8.7 patch 5

Jump to solution

Well, I have the 8.8 Patch 5 running so far without any "big" issues (well, it comes down to the systems you are working with).

A pesky thing to notice would be the "Buffer Overflow Attacks" which are more and more reported by VSE 8.8 Patch 4. You will get more and more of these. Your current VSE 8.7i is not observing this in depth like the 8.8 P4 or 8.8 P5 do.

Furthermore, if it comes to "old" systems like Windows XP and Windows Server 2003, you will have a so called "disabled network interface" from time to time. This is caused by the rootkit scan of the VSE 8.8, which causes a little memory leak every scan (very basically describing here). You can prevent this by not scanning for rootkits (depending on your scan-policy), or plan a scheduled restart (see my post here: https://community.mcafee.com/message/370452#370452).

If you want to update to VSE 8.8, make sure to import the packages first, and do a new system group for deployment (VSE 8.8 deployment) attach a new client task to this group where you set the following actions (VSE 8.8 Installation for Windows):

1. uninstall McAfee 8.7i (including patches)

2. install 8.8 Patch 5 (take the repost patch)

3. make this task enabled for this group and set it to "run immediately".

But apart from that, I am pretty happy with the VSE 8.8. I got more detections with this product and solved the Buffer Overflow issue by implementing HIPS from McAfee.

Greetings,

Alex.