0 Replies Latest reply on Aug 8, 2011 9:00 AM by akira1234

    Event generated time different (UTC)

    akira1234

      With regards to the Knowledgebase below it says that this issue with be resolved with 9.1.

      I am currently running the latest version but still having the issue, i know of the way round it by adding the extra column, but wanted to know if there is an actual software solution for this?

       

      :

       

      https://kc.mcafee.com/corporate/index?page=content&id=KB71235&cat=CORP_DATA_LOSS _PREVENTION_HOST&actp=LIST

       

      Environment

      McAfee Host Data Loss Prevention 9.1
      McAfee Host Data Loss Prevention 9.0

       

      For details of all supported operating systems, see KB51109.

      Problem

      Accessed the All Events screen from DLP Monitor for Host Data Loss Prevention (Host DLP) 9.0. The Event Generated Time displays as some number of hours ahead of the actual time detected.

       

      Example:

      Event details
      ========================================

       

      Event Generated Time (UTC): 1/12/2011 8:36:12 PM
      Event Generated Time (Endpoint): 1/12/2011 4:36:12 PM

       

      Cause

      The reason for the difference is as follows:

      Event Generated Time (UTC): 1/12/2011 8:36:12 PM
      Event Generated Time (Endpoint): 1/12/2011 4:36:12 PM
      ePO Server uses: GMT-04:00

       

      UTC is 4 hours ahead of local event time. If the time zone was GMT-8:00, the event would be 8 hours ahead.

       

      All events are not recorded in UTC time now to bring Host DLP into alignment with the other ePolicy Orchestrator (ePO) managed point products.

       

      Solution

      This is as designed in Host DLP 9.0.

       

      This issue is resolved in Host DLP 9.1.
      To download McAfee products, updates, and documentation, visit the Downloads page at http://www.mcafee.com/us/downloads/downloads.aspx.

       

      For instructions on downloading, see: KB56057.