I have one of our Windows 2008R2 (64bit) server in the DMZ (in a Workgroup not in an AD Domain) behaving strangely. The automatic DAT update via ePO does not work. Operations has to login to the server each day and do a manual update (Rightclick TrayIcon - Update Security). That works every time but the automatic does not.
Server has been setup with out standard template (about a dozen are using the same template and they work fine).
McAfee Agent: 184.108.40.20635
McAfee Secuirty for Lotus Domino: 7.5.1246.0
McAfee VirusScan Enterprise: 8.8.0 (220.127.116.115)
I get the following in the Windows Event Log:
General: The update failed; see event log.
No other events in the Windows Event Log.
What event log is the error referring to?
Has anyone had a similar behavior?
Could you check some logs files here %DEFLOGDIR%, First we need to identify reason.If others are fine from the same template, then we have to look some logs or any clue on that machine,
And also logs file from this location
C:\programe files\mcafee\Agent Handler\DB\Logs
on 2/25/13 1:12:24 PM CST
You want me to upload those here?
zip em up and post them.
Are you able to work out that the this server is actually getting it's updates from your ePO server and getting them directly from McAfeeHTTP?
One more set of logs would help and they're located in
Zip them up and post them as well
please also indicate what type of update is that (FTP, HTTP or internal repository) and whether information flow of that kind is allowed to the repository for that type of traffic/port (in the server's firewall and in the company firewall).
For example: the manual update could launch the default autoupdate, for which the traffic is allowed out, but the ePO scheduled update task might contain an update type or destination that is not allowed entirely to happen. Did this server with the same type of ePO update task ever succeed?