4 Replies Latest reply on Dec 21, 2011 10:55 AM by Tristan

    Big part of our Mcafee client Non-Compliant

      Hi guys,

       

      I'm a new admin of a Epo server. We have a hybrid computer park ( Both Mac and PC).

       

      The problems is : we cannot find why so many client doesnt seems to update the policy of the epo server. we have about 2000 computers out of 7000 thats show non-compliant on our server...

       

      What is the best way to manage and troubleshoot non-compliants computer?

       

      Oh BTW: we using ePO 4.5.4 and clients are in range between 8.5 to 8.8.

       

      Your help will be very appreciated.

        • 1. Re: Big part of our Mcafee client Non-Compliant
          Laszlo G

          Hi julian0 first thing you should have a look at are the extensions for VirusScan.

           

          If you go under menu->Software->Extensions wich version do you have for VirusScan Enterprise (it should be 8.5.x, 8.7.x and 8.8.x)

          • 2. Re: Big part of our Mcafee client Non-Compliant

            Hi Ulysse,

             

            everything is here, installed and running

             

            8.5,8.7 and 8.8

            • 3. Re: Big part of our Mcafee client Non-Compliant

              You must know if the repository of these machines is available for them to update their content. You must check if these machine actually has both agent and anti-virus running.

               

              The first test you want to do is try to manually update them. What's the error do you get?

               

              One interesting thing to do is check the last communication for these computers, and what DAT version they have. If all have the same DAT version, is probably something with the repository.  If not, several of them may not have anti-virus or agent installed.

               

              Another I'd check is if these machines still exists on your network, if your ePO has no cleanup schedule of inactive agents you must have some old machines that doesn't exist anymore but weren't removed from ePO.

               

              Hope it helps!

              • 4. Re: Big part of our Mcafee client Non-Compliant
                Tristan

                Which compliance query are you running?

                 

                Agent Compliance, VSE 8.5 Compliance, VSE 8.7 Compliance or VSE 8.8 Compliance.

                 

                If you're running the 8.8 compliance query then all computers with 8.5 or 8.7 installed will show up as non-compliant (and vice versa)

                 

                Also if you're DAT are out of date this will list machines as non-compliant as well.

                 

                I have noticed as well if you've got 8.8 patch 1 installed the sometimes the 8.8 compliance query has a 'Patch = 0' filter on it which can also screw things up.