cancel
Showing results for 
Search instead for 
Did you mean: 
andymease
Level 10
Report Inappropriate Content
Message 1 of 12

Track saturation of a SuperDAT

We currently have a SuperDAT we are testing for deployment but I'd like to be able to monitor its saturation throughout the environment.  It is only making one small registry change but that key does not appear to be reported back to ePO.  Does anyone know of a good way of accomplishing this within ePO?

Thanks,

Andrew

on 12/3/09 12:51 PM
11 Replies
GWIRT
Level 12
Report Inappropriate Content
Message 2 of 12

Re: Track saturation of a SuperDAT

Unfortunately ePO 4.5 doesn't have a way to report this. System Information Reporter (SIR) will be out in Q2 2001 that may be able to help with this. If you are running ePO 4.0 you can use System Compliance Profiler (SCP) for this.

andymease
Level 10
Report Inappropriate Content
Message 3 of 12

Re: Track saturation of a SuperDAT

That's unfortunate as we've found the reg keys created for this under 'HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates\TVD\Shared Components\'

Under 'Framework' there is a 'LastSuperDATVersion' key with what appears to be a unique version that coincides with the checkin time - i.e. 20091202212119

Couldn't this just be reported to ePO?

Thanks,

Andrew

GWIRT
Level 12
Report Inappropriate Content
Message 4 of 12

Re: Track saturation of a SuperDAT

This could definitely be entered as an FMR, but currently there is no way I know of to capture this data in ePO.

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 5 of 12

Re: Track saturation of a SuperDAT

If you're using ePO 4.5 and MA 4.5, then another possibility would be to modify the superdat to set one of the CustomProps registry values. This would then be reported back to ePO and you can query for it, tag based on it, and so on.

Regards -

Joe

David.G
Level 7
Report Inappropriate Content
Message 6 of 12

Re: Track saturation of a SuperDAT

Joe,

Could you please elaborate on this "CustomProps registry values"? I'm not seeing that in the registry, where should this entry be, or be added?

How can we create the link between Custom 1, Custom 2, etc. and their corresponding CustomProps?

Is there any documentation on this, I've been looking for a while for this and have spoken with support about it but until ePO4.5 and MA 4.5, this was not supported. Has this changed at all?

Thanks for any help.

Dave.

McAfee Employee jstanley
McAfee Employee
Report Inappropriate Content
Message 7 of 12

Re: Track saturation of a SuperDAT

KB67385 lists the correct commandline parameters to accomplish this.

Essentially it creates a registry key here:

[HKLM\Software\Network Associates\ePolicy orchestrator\Agent\CustomProps]

In that key it creates a String Value labeled "CustomPropsX" where X is a numeric value between 1-4 and the value for that key is whatever you specify. This value will then show up in the system properties for that machine in ePO.

David.G
Level 7
Report Inappropriate Content
Message 8 of 12

Re: Track saturation of a SuperDAT

Thanks Jeremy, this was very useful!!! Do you also know what happens if the agent gets reinstalled? would these properties be lost/overwritten? I can certainly test that though.

Again, thanks!

Dave.

McAfee Employee jstanley
McAfee Employee
Report Inappropriate Content
Message 9 of 12

Re: Track saturation of a SuperDAT

I suspect they will be overwritten unless you re-pass the commandline arguments during the install. So to be clear after the agent is installed you can use this commandline to update the properties:

FrmInst.exe /CustomProps1="Property 1"/CustomProps2="Property 2" /CustomProps3="Property 3" /CustomProps4="Property 4"

During the install you can use this commandline to use the properties:

framepkg.exe /install=agent /CustomProps1="Property 1"/CustomProps2="Property 2" /CustomProps3="Property 3" /CustomProps4="Property 4"

If you "forceinstall" the agent without the above switches it will overwrite the custom props for sure. If you do a standard install without the above switches I'm not sure.

Re: Track saturation of a SuperDAT

One last question in this case, if the agent is pushed by ePO, how can these properties be preserved or added?

Contrary to the other product deployment task, there is no command switch option in the agent (initial) deployment.

Thanks.

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community