3 Replies Latest reply on Sep 2, 2012 8:48 PM by hem

    EPO 4.5 - Agent To Server Communication Error - Unmanaged

      Hey everyone. I'm working on a EPO deployment where many of the machines are showing up as unmanaged. I tested the ports from the PCs using telnet, and I was able to connect. I restarted the Apache service on the EPO server, that didn't work. I also tried re-installing (RE-Deploying) the agent through EPO to the machines that are showing up as unmanaged and that didn't work either. So far about 50% of the machines on this deployment are showing up as unmanaged. I've been researching this all day.

       

      Not sure what it could be at this point. Any ideas?

       

      Here are is the agent log:

       

      2012-08-30 12:53:48.995          I          #12880          imutils          Trying with site: 10.0.0.1:80

      2012-08-30 12:53:48.995          I          #12880          naInet          HTTP Session initialized

      2012-08-30 12:53:48.995          I          #12880          imsite                    Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192115770000_2990837077.spkg

      2012-08-30 12:53:48.995          I          #12880          imsite                    Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192289920000_3383481918.spkg

      2012-08-30 12:53:49.124          I          #12880          imsite          NaInet library returned code == 13

      2012-08-30 12:53:49.124          I          #12880          naInet          HTTP Session closed

      2012-08-30 12:53:49.125          i          #12880          Agent          No package received from ePO Server

      2012-08-30 12:53:49.125          i          #12880          Agent          Agent communication session closed

      2012-08-30 12:53:49.191          I          #12880          Agent          Started processing a package..

      2012-08-30 12:53:49.787          I          #12880          SpiPkgr          Using sequence number 4578

      2012-08-30 12:53:49.797          i          #12880          Agent          Agent communication session started

      2012-08-30 12:53:49.798          i          #12880          Agent          Agent is sending EVENT package to ePO server

      2012-08-30 12:53:49.798          i          #12880          Agent          Agent is connecting to ePO server

      2012-08-30 12:53:49.801          I          #12880          imutils          Trying with site: 10.0.0.1:80

      2012-08-30 12:53:49.801          I          #12880          naInet          HTTP Session initialized

      2012-08-30 12:53:49.801          I          #12880          imsite                    Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192116290000_934960453.spkg

      2012-08-30 12:53:49.802          I          #12880          imsite                    Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192297970000_3399441098.spkg

      2012-08-30 12:53:49.909          I          #12880          imsite          NaInet library returned code == 13

      2012-08-30 12:53:49.909          I          #12880          naInet          HTTP Session closed

      2012-08-30 12:53:49.910          i          #12880          Agent          No package received from ePO Server

      2012-08-30 12:53:49.910          i          #12880          Agent          Agent communication session closed

      2012-08-30 12:53:49.965          I          #12880          Agent          Started processing a package..

      2012-08-30 12:53:50.423          I          #12880          SpiPkgr          Using sequence number 4579

      2012-08-30 12:53:50.448          i          #12880          Agent          Agent communication session started

      2012-08-30 12:53:50.448          i          #12880          Agent          Agent is sending EVENT package to ePO server

      2012-08-30 12:53:50.448          i          #12880          Agent          Agent is connecting to ePO server

      2012-08-30 12:53:50.451          I          #12880          imutils          Trying with site: 10.0.0.1:80

      2012-08-30 12:53:50.451          I          #12880          naInet          HTTP Session initialized

      2012-08-30 12:53:50.451          I          #12880          imsite                    Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192116970000_3111658438.spkg

      2012-08-30 12:53:50.452          I          #12880          imsite                    Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192304480000_3916876590.spkg

      2012-08-30 12:53:50.604          I          #12880          imsite          NaInet library returned code == 13

      2012-08-30 12:53:50.604          I          #12880          naInet          HTTP Session closed

      2012-08-30 12:53:50.605          i          #12880          Agent          No package received from ePO Server

      2012-08-30 12:53:50.605          i          #12880          Agent          Agent communication session closed

      2012-08-30 12:53:50.662          I          #12880          Agent          Started processing a package..

      2012-08-30 12:53:51.351          I          #12880          SpiPkgr          Using sequence number 4580

      2012-08-30 12:53:51.370          i          #12880          Agent          Agent communication session started

      2012-08-30 12:53:51.371          i          #12880          Agent          Agent is sending EVENT package to ePO server

      2012-08-30 12:53:51.371          i          #12880          Agent          Agent is connecting to ePO server

      2012-08-30 12:53:51.375          I          #12880          imutils          Trying with site: 10.0.0.1:80

      2012-08-30 12:53:51.375          I          #12880          naInet          HTTP Session initialized

      2012-08-30 12:53:51.376          I          #12880          imsite                    Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192117510000_2648815176.spkg

      2012-08-30 12:53:51.376          I          #12880          imsite                    Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908192313710000_3051797287.spkg

      2012-08-30 12:53:51.469          I          #12880          imsite          NaInet library returned code == 13

      2012-08-30 12:53:51.469          I          #12880          naInet          HTTP Session closed

      2012-08-30 12:53:51.470          i          #12880          Agent          No package received from ePO Server

      2012-08-30 12:53:51.470          i          #12880          Agent          Agent communication session closed

      2012-08-30 12:56:56.430          i          #12176          Agent          Agent Started Enforcing policies

      2012-08-30 12:56:56.430          I          #12176          Agent          Thread time-out occurred

      2012-08-30 12:56:56.430          I          #12176          Manage          Enforcing policies

      2012-08-30 12:56:56.442          i          #12176          Manage          Enforcing Policies for VIRUSCAN8800

      2012-08-30 12:56:56.461          i          #12176          Manage          Enforcing Policies for EPOAGENT3000META

      2012-08-30 12:56:56.464          i          #12176          Manage          Enforcing Policies for EPOAGENT3000

      2012-08-30 12:56:56.469          i          #12176          Manage          Enforcing Policies for McAfee Agent

      2012-08-30 12:56:56.469          I          #12176          Agent          CePOAgent::EnforcePolicy priority=-2

      2012-08-30 12:56:56.469          I          #12176          Agent          Enforcing policies

      2012-08-30 12:56:56.481          I          #12176          LstnSvr          Enforcing Policies

      2012-08-30 12:56:56.488          I          #12176          Logging          Enforcing policies

      2012-08-30 12:56:56.490          I          #12176          Manage          Enforcing policies

      2012-08-30 12:56:56.565          I          #12176          UsrSpCt          Enforcing policies

      2012-08-30 12:56:56.567          I          #12176          Sched          >>--CSchedule::EnforcePolicy

      2012-08-30 12:56:56.567          I          #12176          Sched          >>--CSchedule::ModifyTask

      2012-08-30 12:56:56.567          I          #12176          Sched          <<--CSchedule::ModifyTask

      2012-08-30 12:56:56.591          I          #12176          Sched          Client Update task - Last run time is : not run yet

      2012-08-30 12:56:56.591          I          #12176          Sched          0 fields of the task 21 are updated successfully

      2012-08-30 12:56:56.591          I          #12176          Sched          RunAtEnforcementEnabled not found in the task settings

      2012-08-30 12:56:56.591          I          #12176          Sched          >>--CSchedule::ModifyTask

      2012-08-30 12:56:56.591          I          #12176          Sched          <<--CSchedule::ModifyTask

      2012-08-30 12:56:56.616          I          #12176          Sched          Deploy VSe 8.7 and AntiSpyware - Last run time is : not run yet

      2012-08-30 12:56:56.616          I          #12176          Sched          0 fields of the task 25 are updated successfully

      2012-08-30 12:56:56.616          I          #12176          Sched          >>--CSchedule::ModifyTask

      2012-08-30 12:56:56.616          I          #12176          Sched          <<--CSchedule::ModifyTask

      2012-08-30 12:56:56.636          I          #12176          Sched          BNDeploy 8.8 all Corp - Last run time(local) is Thu Aug 30 11:51:54 2012

      2012-08-30 12:56:56.636          I          #12176          Sched

      2012-08-30 12:56:56.636          I          #12176          Sched          0 fields of the task 44 are updated successfully

      2012-08-30 12:56:56.636          I          #12176          Sched          >>--CSchedule::GetTask

      2012-08-30 12:56:56.636          I          #12176          Sched          <<--CSchedule::GetTask

      2012-08-30 12:56:56.636          I          #12176          Sched          >>--CSchedule::GetTask

      2012-08-30 12:56:56.636          I          #12176          Sched          <<--CSchedule::GetTask

      2012-08-30 12:56:56.637          I          #12176          Sched          >>--CSchedule::GetTask

      2012-08-30 12:56:56.637          I          #12176          Sched          <<--CSchedule::GetTask

      2012-08-30 12:56:56.637          I          #12176          Sched          <<--CSchedule::EnforcePolicy

      2012-08-30 12:56:56.637          i          #12176          Agent          Agent finished Enforcing policies

      2012-08-30 12:56:56.637          i          #12176          Agent          Next policy enforcement in 5 minutes

      2012-08-30 12:58:31.813          I          #13992          Agent          Sending the next batch of immediate events

      2012-08-30 12:58:31.813          i          #13992          Agent          Agent is looking for events to upload

      2012-08-30 12:58:31.815          i          #13992          Agent          Agent uploading 3 events to ePO Server

      2012-08-30 12:58:31.815          I          #12880          Agent          Started processing a package..

      2012-08-30 12:58:31.816          I          #12880          SpiPkgr          Using sequence number 4581

      2012-08-30 12:58:31.836          i          #12880          Agent          Agent communication session started

      2012-08-30 12:58:31.837          i          #12880          Agent          Agent is sending EVENT package to ePO server

      2012-08-30 12:58:31.837          i          #12880          Agent          Agent is connecting to ePO server

      2012-08-30 12:58:31.839          I          #12880          imutils          Trying with site: 10.0.0.1:80

      2012-08-30 12:58:31.840          I          #12880          naInet          HTTP Session initialized

      2012-08-30 12:58:31.840          I          #12880          imsite                    Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908195118140000_1056638459.spkg

      2012-08-30 12:58:31.840          I          #12880          imsite                    Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129908195118370000_3834463056.spkg

      2012-08-30 12:58:32.129          I          #12880          imsite          NaInet library returned code == 13

       

      Message was edited by: latprosec on 8/30/12 12:27:56 PM CDT

       

      Message was edited by: latprosec on 8/30/12 12:44:58 PM CDT
        • 1. Re: EPO 4.5 - Agent To Server Communication Error - Unmanaged
          alexn

          Plz see the server log in epo DB folder

          • 2. Re: EPO 4.5 - Agent To Server Communication Error - Unmanaged

            Here is my server log. I see that the server is receiving events from the machines in question. Is it just not processing them?

             

            20120830144329 I #20868 NAIMSRV Received [Event] from XXXXXXXXXXX4:{XXXXXXXXXXX}

            20120830144329 I #1804 NAIMSRV Received [Event] from XXXXXXXXXXXPC:{XXXXXXXXXXX}

            20120830144329 I #77552 NAIMSRV Received [Event] from XXXXXXXXXXX60P:{XXXXXXXXXXX}

            20120830144330 I #3596 NAIMSRV Received [Event] from XXXXXXXXXXXPC3:{XXXXXXXXXXX}

            20120830144330 I #1404 NAIMSRV Received [Event] from XXXXXXXXXXXP:{XXXXXXXXXXX}

            20120830144331 I #8608 NAIMSRV Received [Event] from XXXXXXXXXXXPV:{XXXXXXXXXXX}

            20120830144332 I #5836 NAIMSRV Received [PropsVersion] from XXXXXXXXXXXR:{XXXXXXXXXXX}

            20120830144332 I #5836 mod_epo Signing agent response package with key XXXXXXXXXXX

            20120830144332 I #2984 NAIMSRV Received [Event] from XXXXXXXXXXX:{XXXXXXXXXXX}

            20120830144333 I #4580 NAIMSRV Received [IncProps] from XXXXXXXXXXX:{XXXXXXXXXXX}

            20120830144333 I #4580 NAIMSRV Processing agent props for XXXXXXXXXXX({XXXXXXXXXXX})

            20120830144333 I #3016 NAIMSRV Received [Event] from XXXXXXXXXXX:{XXXXXXXXXXX}

            20120830144333 E #1648 NAIMSRV Agent XXXXXXXXXXXwith GUID {XXXXXXXXXXX} and IP 10.0.0.3 and MAC XXXXXXXXXXX has an invalid sequence number; expecting 49907 > 101603

            20120830144333 I #13872 NAIMSRV Received [Event] from XXXXXXXXXXX:{XXXXXXXXXXX}

            20120830144333 I #1648 NAIMSRV Sequence error log hourly log limit exceeded -- database logging disabled

            20120830144333 E #1648 NAIMSRV Rejecting agent due to an invalid or duplicate sequence number

            20120830144333 E #1648 mod_epo Failed to process agent request

            20120830144333 I #1460 NAIMSRV Received [Event] from XXXXXXXXXXX:{XXXXXXXXXXX}

            20120830144333 E #2056 NAIMSRV Agent XXXXXXXXXXX with GUID {XXXXXXXXXXX} and IP 10.0.0.4 and MAC XXXXXXXXXXX has an invalid sequence number; expecting 36063 > 36400

            20120830144333 I #2056 NAIMSRV Sequence error log hourly log limit exceeded -- database logging disabled

            20120830144333 E #2056 NAIMSRV Rejecting agent due to an invalid or duplicate sequence number

            20120830144333 E #2056 mod_epo Failed to process agent request

            20120830144333 E #22408 NAIMSRV Agent XXXXXXXXXXX with GUID {XXXXXXXXXXX} and IP 10.0.0.5 and MAC 78e3b5cbe859 has an invalid sequence number; expecting 37875 > 101603

            20120830144333 I #22408 NAIMSRV Sequence error log hourly log limit exceeded -- database logging disabled

            20120830144333 E #22408 NAIMSRV Rejecting agent due to an invalid or duplicate sequence number

            20120830144333 E #22408 mod_epo Failed to process agent request

            20120830144333 I #2304 NAIMSRV Received [Event] from XXXXXXXXXXX:{XXXXXXXXXXX}

            20120830144334 E #11144 NAIMSRV Agent XXXXXXXXXXX with GUID {XXXXXXXXXXX} and IP 10.0.0.6 and MAC XXXXXXXXXXX has an invalid sequence number; expecting 41079 > 101603

            20120830144334 I #11144 NAIMSRV Sequence error log hourly log limit exceeded -- database logging disabled

            20120830144334 E #11144 NAIMSRV Rejecting agent due to an invalid or duplicate sequence number

            20120830144334 E #11144 mod_epo Failed to process agent request

            20120830144334 I #3820 NAIMSRV Received [Event] from XXXXXXXXXXX:{XXXXXXXXXXX}

            • 3. Re: EPO 4.5 - Agent To Server Communication Error - Unmanaged
              hem

              In the server.log please search with machine name. It looks like sequence error.

               

              Please run the server task as per KB#: KB60776 if not using EEPC or else please reset GUID as per KB#: KB56086