7 Replies Latest reply on Apr 26, 2010 5:56 AM by JoeBidgood

    Master repository Status

      Hello,

       

      In de master repository status i see theh following:

       

      This master repository is up-to-date with protection against all  known threats.
      My RepositoryLatest Available
      DAT:5963.00005928.0000
      Engine:5400.11585400.1158
      MyAvert Security Threats:0 unread
      Last check:2010-03-23 19:55:22.217

       

      I have a update task that every hout the dat en engine updat,e but is see that the last check is 2010-03-23 but the dat i the latest, how is this posible?

       

      Task: Dat & Engine pull Enabled Hourly 4/26/10 12:00 PM 4/26/10 7:59 AM

       

      Where is the Latest Available, on the site by Mcafee or somewhere else?

       

      Dat & Engine pullEnabledHourly4/26/10 12:00 PM4/26/10 7:59 AM

      Thans,

       

      Pascal

      Netherlands

        • 1. Re: Master repository Status
          JoeBidgood

          The "latest available" information is taken from the Avert web server at http://myavert.avertlabs.com on port 8801.  The most common cause of problems here are either having 8801 blocked at the firewall, or a proxy between the ePO server and McAfee. Can you access http://myavert.avertlabs.com:8801/reportservice.asmx?wsdl from the ePO server?

           

          Regards -

           

          Joe

          • 2. Re: Master repository Status

            We have a proxy server between it at port 8080.

             

            And i can access http://myavert.avertlabs.com:8801/reportservice.asmx?wsdl

             

            regards,

             

            Pascal

             

             

            Message was edited by: PG62 on 4/26/10 5:07:07 AM CDT
            • 3. Re: Master repository Status
              JoeBidgood

              Okay, great

               

              Check the orion.log on the ePO server - does it report any errors relating to the 'MyAvert' task? Feel free to post it here if you're not sure...

               

              Regards -

               

              Joe

              • 4. Re: Master repository Status

                This is the orion.log from the last hour.

                 

                2010-04-26 11:59:39,328 ERROR [pool-5-thread-1] daemon.AvertService  - Exception while executing the AvertAlerts command: POST Command got unexpected HTTP Status:403
                2010-04-26 11:59:47,810 ERROR [pool-4-thread-10] engine.RebuildMasterCatalog  - Error saving new entry to EPOMasterCatalog
                2010-04-26 12:14:39,359 ERROR [pool-5-thread-1] cmd.CommandInvoker  - Error invoking command:AvertAlerts.Web.Service
                java.io.IOException: POST Command got unexpected HTTP Status:403
                    at com.mcafee.epo.avertalerts.myavert.AvertAlertsClient.sendSoapRequest(AvertAlert sClient.java:164)
                    at com.mcafee.epo.avertalerts.myavert.AvertAlertsClient.getReport(AvertAlertsClien t.java:195)
                    at com.mcafee.epo.avertalerts.myavert.AvertAlertsClient.getReportByName(AvertAlert sClient.java:229)
                    at com.mcafee.epo.avertalerts.command.AvertWebService.invoke(AvertWebService.java: 84)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:835)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invokeCommand(CommandInvoker.java:626)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:615)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:474)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:449)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:643)
                    at com.mcafee.orion.core.cmd.CommandInvoker.invoke(CommandInvoker.java:651)
                    at com.mcafee.epo.avertalerts.daemon.AvertService$AvertDaemon.run(AvertService.jav a:94)
                    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
                    at java.util.concurrent.FutureTask$Sync.innerRunAndReset(FutureTask.java:317)
                    at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:150)
                    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$101 (ScheduledThreadPoolExecutor.java:98)
                    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.runPeriodi c(ScheduledThreadPoolExecutor.java:181)
                    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Schedu ledThreadPoolExecutor.java:205)
                    at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java: 886)
                    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
                    at java.lang.Thread.run(Thread.java:619)
                2010-04-26 12:14:39,360 ERROR [pool-5-thread-1] daemon.AvertService  - Exception while executing the AvertAlerts command: POST Command got unexpected HTTP Status:403

                • 5. Re: Master repository Status

                  I read in another post KB53619 that is by fixed in version 4.5.

                  • 6. Re: Master repository Status
                    JoeBidgood

                    Okay, 403 means forbidden. Which version of ePO are you running?

                    Are there any entries in your proxy logs to indicate that this URL would be blocked?

                     

                    HTH -

                     

                    Joe

                    • 7. Re: Master repository Status
                      JoeBidgood

                      Oops, missed this response when I was writing the other one

                       

                      There are certainly some things related to the myavert task that are fixed in 4.5, so as a test it might be worth installing 4.5 on a test machine and seeing if it can run the task correctly through the same proxy setup that your production server is using...

                       

                      Regards -

                       

                      Joe