ePO show non-compliant systems, but they compliant

[Schopenhauer]

Hi there..

I have several questions about how ePO show compliant.

1. ePO show MAC machine as non-compliant,. I think it's because the field "AMCore Content Version" is empty, but via field "DAT Version (Non-Windows) it's show the last AMCore version.

2. ePO show Windows machine as non-compliant due old AMCore version, but via Client events I can see:

So, my point is to fix it all and show correctly information. How can I do it?

[Hawkmoon]

Hi Schopenhauer,

Can I ask that you run this past the ENS guys for review please?

MA will only report what it presented to it from the point products plugin file. If that detail/information is not passed to the agent, the agent has nothing to report. Unwanted as this maybe it is correct operation.

[Schopenhauer]

Can you reparaphrase your first question? Because I don't understand.

[cdinet · Accepted solution]

I would configure 2 different compliance reports - one for Windows that uses amcore and one for non-windows that uses dats.  That would fix the issue with Mac's not showing compliant.  As for the event you took screenshot of, the update failed.  A result of already running latest version should not show a failed event.  If you go to the system itself, does it show the correct version installed?  What version dat does the compliance report show as installed? 

Make sure also that there is no duplicate system that might be skewing reports. 

[Schopenhauer]

About 2 different reports.

I suppose, there is impossible to make query with good criteria.

For example, for Windows machines I have:
AMCore Content Data -> Is whithin the last -> 3 Days

And I can't make the similiar with MAC machines, because there is only "DAT Version (Non-Windows)" where I can't choose the same "Is whithin the last -> 3 Days", only Equal, Contains, etc.

How can I make compliant check more automating? Because, all time looking for DAT version from Mcafee site and compare it with my - kind of not pleasure.

About ENS, I will check soon.

[cdinet]

Ok, I have been testing this on my test server that has a linux system with ens.  Change your criteria to use amcore content date is within last 3 days and that will cover both windows and non-windows systems.

[Schopenhauer]

Hm, in my case there is empty field with version in AMCore Content Date.

Propably I need to redeploying agent, or something else.

Anyway, thanks for help!

[cdinet]

Hope that works for you!