3 Replies Latest reply on Oct 28, 2009 2:37 PM by mrpg

    Delay in Receiving Alerts in ePO v4.0

      Hi,

      I've noticed that it can take a long time for an alert to be sent for some/all events. An e.g. would be testing eicar.com virus. I will create the test file on the desktop and generate an alert on the client. It can take anywhere from 30 seconds, to 30 min for the event to generate an email alert sent through the ePO server. Another e.g. would be testing an 'Access Protection' rule, 'Prevent mass mailing worms from sending mail'. I tested some app that was being blocked and noted it in the client's access protection log. It took 45 min for the event to be sent out via ePO.

      Is this expected behaviour?

      Richard J.C.
      x1 4.0 ePO Patch 5/Build 1298
      x1 3.0.2 ePO
      McAfee Agent 3.5.5.438 & 4.0.0.1494
      VSE 8.0.0.1009 Patch 14, 1000 Units and shrinking
      VSE 8.7 Patch 2, 20 Units and growing
        • 1. RE: Delay in Receiving Alerts in ePO v4.0
          mrpg
          no its not- couple things to check;

          In the agent policy see if "event forwarding" is enabled.
          Also server settings- automatic reponses- see what the processing time is set to.
          • 2. RE: Delay in Receiving Alerts in ePO v4.0
            Thanks for the response.

            Event fowarding is indeed enabled and the settings are as below;

            Enable priority event forwarding: Checked
            Forward events with a priority equal or greater than: Major
            Interval between uploads (minutes): 5
            Maximum number of events per upload: 10

            "Also server settings- automatic reponses- see what the processing time is set to. "
            I don't see this setting you are referring to, is this an ePO v4.0 setting?

            Richard J.C.
            x1 4.0 ePO Patch 5/Build 1298
            x1 3.0.2 ePO
            McAfee Agent 3.5.5.438 & 4.0.0.1494
            VSE 8.0.0.1009 Patch 14, 1000 Units and shrinking
            VSE 8.7 Patch 2, 20 Units and growing
            • 3. RE: Delay in Receiving Alerts in ePO v4.0
              mrpg
              Sorry about that- memory served me INcorred... the option was Event Notification. It may not be there though, I'm on 4.5.