I have a group of un-managed client systems, Windows 2000 - 7, running VirusScan Enterprise 8.5i Patch 8 and 8.7i Patch 2. It's my understanding that 4 McAfee software components need to be kept updated in such an environment:
1. VirusScan 8.x itself via Patches and Hotfixes
2. VirusScan engine (5400 is current)
3. Daily DAT files that contain the latest virus signatures
4. Agent, which is either the older CMA (KB54555) or newer McAfee Agent 4.x that downloads the updated engines and virus dat's, as well as Agent Patches and Hotfixes
CMA 3.6.0 Patch 4 End of Life: March 31, 2010, per KB54555. I think this means that starting 2010-04-01 that these systems will no longer be able to download DAT files and engines from the public McAfee servers. Can I assume any system that has %ProgramFiles%\Network Associates\Common Framework\FrameworkService.exe is runnning CMA 3.x and needs to be upgraded to MA 4.0 or 4.5?
I have not been able to find any information what Agent versions are included with which VirusScan Enterprise 8.x versions, so I don't know if the new 8.7i Patch 3 has new agents, and which agent shipped in 8.5i with patch 8 repost package.
I also found these McAfee articles that are contradictory. Microsoft ends Windows 2000 extended support 2010-07-13 (+ 30 days for any hotfixes released 07-13), and McAfee indicates per KB51573 CMA 3.6 and MA 4.0 are supported on this platform. However CMA 3.6.0 Patch EOL is this month as noted above, and per KB60060 "Planned End of Support for Windows 2000 on MA 4.0 is 13 July 2010. This matches Microsoft end of extended support." McAfee also states per KB66079 that Windows 2000 SP4:
This letter is to confirm that McAfee shall support the Windows 2000 operating system through 2010 with the following products and the related McAfee Agent and Engine components.
- McAfee GroupShield 7.x for Exchange (Windows 2000 Server)
- McAfee GroupShield 7.x for Domino (Windows 2000 Server)
- McAfee VirusScan Enterprise
Does this mean VirusScan will be supported but there will be no updates possible from 2010-07-13 thru 2010-12-31?
PS in KB51573 "phyiscal" should be spelled "physical", and KB68421 is incorrect, Hotfix 542703is not available on the public hotfixes download page http://www.mcafee.com/apps/downloads/security_updates/hotfixes.asp?region=us&seg ment=enterprise