1 2 Previous Next 13 Replies Latest reply on Apr 1, 2011 6:24 AM by PhilR

    EPO 4.6 released

      McAfee ePolicy Orchestrator (ePO) 4.6 is now available from the McAfee Download site at http://www.mcafee.com/us/downloads/

      ePO 4.6 allows customers to further simplify and automate security management and align security management with the needs of the business. ePO 4.6 highlights include:

      • Streamlined installation and guided configuration wizard: deliver highly efficient enterprise-class security management to new small and medium-sized customers
      • Software Manager for direct access and check-in of product updates; eliminates download site visits
      • Client Tasks can now be managed just like policies: import, export and manage tasks or policies from a central catalog
      • Tag-Based Policy Assignment precisely targets assignment of pre-defined security profiles to systems based on their business role or at-risk status
      • Modified System Information view answers customers’ requests for a single screen showing properties and history of an endpoint
      • Streamlined dashboard management includes drag-and-drop editing, dynamic monitor resizing, and custom URLs, plus enhanced export features
      • Advanced reporting: provides report templates customized to a user’s company and personalized for various audiences
      • Customer Web APIs and python scripts: allow admins to build workflows that integrate security management into their business and automate repetitive tasks such as synchronizing endpoint information with other IT platforms; adding/deleting users; executing queries to integrate data with other tools; and adding data to ePO
      • Leveraging the McAfee user community admins can share best of breed dashboards, scripts, queries, and policies with their peers.
      • FIPS 140-2 level 2 validation: ePO 4.6 will be submitted for this high level security validation to support requirements of Federal customers and customers who do business with the government.

       

      For more information, see KB71037 — ePO 4.6 Master list of release support articles: https://kc.mcafee.com/corporate/index?page=content&id=KB71037

       

        • 1. Re: EPO 4.6 released
          psolinski

          Before we upgrade our epo4.5 to 4.6 we have to wait for McAfee to provide support for McAfee Security for Mac (VirusScan for Mac), as it's not included in the initial release and we have a couple of Apple computers.

           

          According to https://kc.mcafee.com/corporate/index?page=content&id=KB69814 Mac extensions will be released on 15th May.

          • 2. Re: EPO 4.6 released
            PhilR

            Unfortunately, productcatalog.mcafee.com does not resolve, so the automated task to download the software manager product list fails.

             

            Program Files\McAfee\ePolicy Orchestrator\DB\SoftwareManager\debug\ProductList\licensed_products_list.xml.tm p contains

             

            <?xml version="1.0" encoding="utf-8"?>

            <SoftwareCatalogProducts xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema">

              <ReturnCode>-1</ReturnCode>

              <Message>Error: The request channel timed out while waiting for a reply after 00:01:00. Increase the timeout value passed to the call to Request or increase the SendTimeout value on the Binding. The time allotted to this operation may have been a portion of a longer timeout.; Source: mscorlib; Exception: System.TimeoutException: The HTTP request to 'https://productcatalog.mcafee.com/WebServices/ProductCatalog/Products.asmx' has exceeded the allotted timeout of 00:01:00. The time allotted to this operation may have been a portion of a longer timeout. ---&gt; System.Net.WebException: The operation has timed out

               at System.Net.HttpWebRequest.GetResponse()

               at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelR equest.WaitForReply(TimeSpan timeout)

               --- End of inner exception stack trace ---

               at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebExceptio n(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)

               at System.ServiceModel.Channels.HttpChannelFactory.HttpRequestChannel.HttpChannelR equest.WaitForReply(TimeSpan timeout)

               at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)</Message>

              <LanguageHash>error</LanguageHash>

            </SoftwareCatalogProducts>

             

            Message was edited by: PhilR on 29/03/11 08:09:21 CDT

             

            Message was edited by: PhilR on 29/03/11 08:09:40 CDT
            • 3. Re: EPO 4.6 released
              AdamPodgórski

              Hello

              I have the following error then I want to download the software product list

               

              3/29/11 1:16:50 PM  Started: Download Software Product List 
              3/29/11 1:16:50 PM  Downloading product list. 
              3/29/11 1:16:51 PM  Downloading file C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp. 
              3/29/11 1:16:51 PM  Downloading file C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp. 
              3/29/11 1:17:52 PM  Successfully downloaded file C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp. 
              3/29/11 1:17:52 PM  Successfully downloaded file C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp. 
              3/29/11 1:17:52 PM  There was an unknown error trying to download the file. 
              3/29/11 1:17:52 PM  Downloading Translation Strings 
              3/29/11 1:17:52 PM  Downloading file C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp. 
              3/29/11 1:18:54 PM  Successfully downloaded file C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp. 
              3/29/11 1:18:54 PM  There was an unknown error trying to download the file. 


              0110329130946 I #03528 INETMGR  Session 1 ended, result=1
              20110329130946 I #03528 SITEMGR  MirrorThreadProc: Mirror thread ended
              20110329130946 x #03528 SITEMGR  SiteMgr main control final release...
              20110329130946 I #03528 SITEMGR  Database Shutdown: Starting.
              20110329130946 I #03528 SITEMGR  Database Shutdown: Succeeded.
              20110329130946 I #03528 INETMGR  Database Shutdown: Starting.
              20110329130946 I #03528 INETMGR  Database Shutdown: Succeeded.
              20110329130946 I #03528 SITEMGRWRAP Database Shutdown: Starting.
              20110329130946 I #03528 SITEMGRWRAP Database Shutdown: Succeeded.
              20110329131651 I #03596 DOWNLOADJNI Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp.
              20110329131651 I #03596 MCUPLOAD Connecting to server epo.mcafee.com through proxy server

              20110329131651 I #03596 MCUPLOAD Successfully disabled CA trust options.
              20110329131651 I #03088 DOWNLOADJNI Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp.
              20110329131651 I #03088 MCUPLOAD Connecting to server epo.mcafee.com through proxy server

              20110329131651 I #03088 MCUPLOAD Successfully disabled CA trust options.
              20110329131752 I #03088 DOWNLOADJNI Finished Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\trial_products_list.xml.tmp (1495 bytes).
              20110329131752 I #03596 DOWNLOADJNI Finished Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\licensed_products_list.xml.tmp (1495 bytes).
              20110329131752 I #00372 DOWNLOADJNI Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp.
              20110329131752 I #00372 MCUPLOAD Connecting to server epo.mcafee.com through proxy server

              20110329131752 I #00372 MCUPLOAD Successfully disabled CA trust options.
              20110329131803 I #02792 EPOJNI   Getting license data...
              20110329131803 I #02792 EPOJNI   Getting license data...
              20110329131821 I #02792 EPOJNI   Getting license data...
              20110329131821 I #02792 EPOJNI   Getting license data...
              20110329131850 I #02792 EPOJNI   Getting license data...
              20110329131850 I #02792 EPOJNI   Getting license data...
              20110329131850 I #02792 EPOJNI   Getting license data...
              20110329131854 I #00372 DOWNLOADJNI Finished Downloading File C:\PROGRA~2\McAfee\EPOLIC~1\DB\product_strings.xml.tmp (1496 bytes).
              20110329131903 I #02792 EPOJNI   Getting license data...

               

              Regards

              Adam

              • 4. Re: EPO 4.6 released
                PhilR

                Adam,

                 

                That's the same error as mine.

                 

                The xml file contents I listed are in "Program Files\McAfee\ePolicy Orchestrator\DB\SoftwareManager\debug\ProductList"

                 

                Cheers,

                 

                Phil

                • 5. Re: EPO 4.6 released

                  I got the same error and MyAvert update through our proxy didn't match anymore :

                   

                  2011-03-29 17:44:58,626 ERROR [pool-7-thread-1] daemon.AvertService  - Exception while executing the AvertAlerts command

                  com.mcafee.orion.core.cmd.CommandException: POST Command got unexpected HTTP Status:407

                  • 6. Re: EPO 4.6 released
                    PhilR

                    Apart from McAfee's DNS in dire need of an update so that productcatalog.mcafee.com resolves, the other thing to watch out for in ePO 4.6 is Client Tasks being disabled during the upgrade (including the RSD sensor deployment task on your RSD Sensor boxes).

                     

                    I went through all my tasks, sanity-checked them, re-enabled them.

                     

                    Although these are hassles we could do without, I like what I see so far.

                     

                    Message was edited by: PhilR on 29/03/11 11:11:23 CDT

                     

                    Message was edited by: PhilR on 29/03/11 11:11:50 CDT
                    • 7. Re: EPO 4.6 released

                      Is there a trial available yet?  I'd like to demo this product in our organization...

                      • 8. Re: EPO 4.6 released

                        No trial that I can see, you would probably need to go through sales to get a demo. If you've not used EPO before there's a lot to setup at first, so make sure you give yourself a bit of time to get everything going. Most important of all, read the manuals, they are very helpful and will shed some light on things you may not know exist. EPO server is pretty easy to use, I was thrown onto it one day and only had the previous server, which was managed by somebody who has about 1000 other things to do every day, and the manual to reference. If you use Active Directory you can import your AD tree and also deploy the EPO agent from the server without needing an EPO agent already installed on any system. That will save a ton of time, otherwise you have to create rules for each group in the system tree, and if youu need to create a lot of groups it can take a while. We don't use Active Directory so I have no idea how well those features works.

                         

                        If you look at EPO server make sure you also look at the following features.

                         

                        Distributed Repositories

                        Agent Handlers

                        Queries

                        Tagging (auto tagging systems reporting to the server)

                         

                        There is one thing missing, I think; the ability to have one system in multiple groups. For example, when it comes time to deploy a new version of the EPO agent or VirusScan it would be nice to be able to create a Deployment group and add systems/groups to that group without also removing them from their group they are already in. You can simulate this with a tag, but it's not really the same thing.

                         

                        Message was edited by: noah on 3/29/11 6:02:55 PM CDT
                        • 9. Re: EPO 4.6 released
                          PhilR

                          Personally, I think tagging is the superior solution here, as you can leave your ePO structure unaltered.

                          1 2 Previous Next