7 Replies Latest reply on Oct 21, 2009 11:26 AM by ewinglane

    Clients not updating DAT

      Hi All,

      I'm at my wits' end. I've gone through the tutorial and searching for the solution online. Unfortunately, I've not found one.

      I've about 40 machines in my company. I've already install ePO 4.0 in my server. Currently, my ePO agent is version 4.0. I am able to deploy the agent successfully to all my clients. However, some of this clients are not able to do auto update. I'm able to wake up the agent without any issue.

      Steps that I've done:
      i) Update the epo agent from version 3.6 to 4.0
      ii) I've copied the Sitelist.xml from the working client to the non-working client.

      I've noticed that in the log, at one of the line, it said No Package received from ePO server.

      Hope anyone out there can enlighten me.

      Below is the log of one of the file.

      Thursday, July 09, 2009 11:00:00 AM Info Scheduler The task Agent Wakeup is successful
      Thursday, July 09, 2009 11:00:00 AM Info Scheduler Scheduler: Task [Agent Wakeup] is finished
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent communication session started
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent is sending PROPS VERSION package to ePO server
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent is connecting to ePO server
      Thursday, July 09, 2009 11:00:09 AM Info Agent Package uploaded to ePO Server successfully
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent communication session closed
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent received REQUEST PROPS package from ePO server
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent communication session started
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent is sending INC PROPS package to ePO server
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent is connecting to ePO server
      Thursday, July 09, 2009 11:00:09 AM Info Agent No package received from ePO Server
      Thursday, July 09, 2009 11:00:09 AM Info Agent Agent communication session closed
      Thursday, July 09, 2009 11:03:41 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:03:41 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:03:41 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:03:41 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:03:41 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:03:41 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:03:41 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:05:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:08:41 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:08:41 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:08:42 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:08:42 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:08:42 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:08:42 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:08:42 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:10:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:13:42 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:13:42 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:13:42 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:13:42 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:13:42 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:13:42 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:13:42 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:15:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:18:42 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:18:42 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:18:43 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:18:43 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:18:43 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:18:43 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:18:43 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:20:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:23:43 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:23:43 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:23:43 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:23:43 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:23:43 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:23:43 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:23:43 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:25:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:28:44 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:28:44 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:28:44 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:28:44 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:28:44 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:28:44 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:28:44 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:30:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:33:44 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:33:44 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:33:44 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:33:44 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:33:44 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:33:45 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:33:45 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:35:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:38:45 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:38:45 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:38:45 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:38:45 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:38:45 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:38:45 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:38:45 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:40:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:43:45 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:43:45 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:43:45 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:43:45 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:43:45 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:43:46 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:43:46 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:45:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:48:46 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:48:46 AM Info Management Enforcing Policies for VIRUSCAN8600
      Thursday, July 09, 2009 11:48:46 AM Info Management Enforcing Policies for EPOAGENT3000META
      Thursday, July 09, 2009 11:48:46 AM Info Management Enforcing Policies for EPOAGENT3000
      Thursday, July 09, 2009 11:48:46 AM Info Management Enforcing Policies for McAfee Agent
      Thursday, July 09, 2009 11:48:46 AM Info Agent Agent finished Enforcing policies
      Thursday, July 09, 2009 11:48:46 AM Info Agent Next policy enforcement in 5 minutes
      Thursday, July 09, 2009 11:50:09 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:53:40 AM Info Agent Agent started performing ASCI
      Thursday, July 09, 2009 11:53:40 AM Info Management Collecting Properties
      Thursday, July 09, 2009 11:53:46 AM Info Agent Agent Started Enforcing policies
      Thursday, July 09, 2009 11:53:48 AM Info Agent Agent is looking for events to upload
      Thursday, July 09, 2009 11:53:48 AM Info Management Enforcing Policies for VIRUSCAN8600
        • 1. RE: Clients not updating DAT
          I'm having a similar issue. Did you ever resolve the problem?
          • 2. RE: Clients not updating DAT
            redbaron51
            Do you have DAT update tasks setup for this group?

            Have you checked whether Block Inheritance is applied for this group?

            Autoupdate is redundant as you can and should control everything centrally from ePO, e.g., DAT Update

            Let us know how you get on.....
            • 3. RE: Clients not updating DAT
              I have a client task set up for DAT updates. It's configured to run immediately.
              The task was created at the root and inherited down. Although, on some containers I unchecked inheritance and changed settings. It didn't make a difference.

              Most machines will update the DAT during the daily auto update that is set within Virus Scan.

              I am updating the engine to 5400 on some test machines to see if that helps.

              Currently running
              ePO 4.0
              Agent 4.0.0.1421
              VS 8.7.0.570
              Scan Engine 5301.4018
              • 4. RE: Clients not updating DAT
                Namster


                The Run Immediately Task is a run once task, you probably know that. Try and tweak the task, like add a 1 minute randomization and then get the client to collect and send props.

                On the client, you can view all the tasks and the status from \all users\app data\mcafee\common..\task ..and then \taskinternaldata ... from there you can see if the task is coming down with updates, and from internaldata you can see if the task has already run.

                Instead of run immedidately for a daily task update, configure it for "daily" once or multiple times.
                • 5. RE: Clients not updating DAT
                  I've tweaked the task a little. It seems to help for a day or 2, but then goes back to only updating during that scheduled time set in VirusScan. With that scenario it can take 12 - 15 hours before clients catch up to the DAT listed in the repository.

                  How do your machines update? Are they a DAT behind what's in the repository or do they update right away?

                  Thanks.
                  • 6. RE: Clients not updating DAT
                    Namster
                    I have "Product Update" task, with selected items "DAT, Engine and HIPS Content", "Enabled", "Daily", "Randomization at ## hours", "Run Missed Task 30 minute delay", schedule "Once At", "Every 1" day.

                    Now, adjust your randomization so that not all your clients will hit up your ePO Super Agent Repositories at the same time.


                    Now, don't forget that you probable have a "server task" that pulls the new dat file down at a certain time. I usually schedule my Product Update one hour after that because it sometimes takes "ME" that long to pull updates.

                    1. Server downloads update at 1200
                    2. Clients perform product update at 1300 with a randomization of 4 hours. (between 1300 and 1700)
                    Result: By 1700, most clients that were online should have downloaded the new dat.

                    My clients that get updated are on par with the ePO server dat version.
                    • 7. RE: Clients not updating DAT
                      I created 2 tasks (1 mid-day, 1 overnight) similar to your example. I've let that run for several days and it seems to be working well now.

                      Thanks for the help!