Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
1276 Views 5 Replies Latest reply: Mar 14, 2013 3:38 PM by flitcraft33 RSS
gaztop1 Newcomer 1 posts since
May 16, 2011
Currently Being Moderated

Mar 11, 2013 1:44 AM

MSME 8.0 not recieving policies from ePO Exch 2010

Hi All,

 

experiencing an issue or problem. We have installed MSME 8.0 on a 2010 Exchange server and have the latest McAfee Agent installed as well, when we try and apply policies from ePO if i look into the logs i get an error message

 

2013-03-11 09:25:05 I #24356 ProdMgr Start to enforce policies for SoftwareID VIRUSCAN8800|MSME____8000|EPOAGENT3000META|EPOAGENT3000|

2013-03-11 09:25:07 I #24356 Datastore Did not find section Policies+0 for software ID MSME____8000

2013-03-11 09:25:07 I #24356 Datastore Did not find section Policies+0 for software ID PolicyRoot

2013-03-11 09:25:08 I #24356 Datastore Did not find section Settings+0 for software ID MSME____8000

2013-03-11 09:25:08 I #24356 Datastore Did not find section Settings+0 for software ID PolicyRoot

2013-03-11 09:25:08 I #24356 Datastore Did not find section Identities+0 for software ID MSME____8000

2013-03-11 09:25:08 I #24356 Datastore Did not find section Identities+0 for software ID PolicyRoot

2013-03-11 09:25:08 I #24356 Datastore Did not find section TimeRestrictions+0 for software ID MSME____8000

2013-03-11 09:25:08 I #24356 Datastore Did not find section TimeRestrictions+0 for software ID PolicyRoot

2013-03-11 09:25:08 I #24356 Datastore Did not find section Alerts+0 for software ID MSME____8000

2013-03-11 09:25:08 I #24356 Datastore Did not find section Alerts+0 for software ID PolicyRoot

 

These are the type of errors i am seeing in the PrdMgr_<system>.log

 

in the Mcsript and the Agent logs all looks like it is applying... when i check the console on the exchange server i do not see the policies applied and i have confirmed in ePO all is working, any reason for this >? any advice appreciated

  • flitcraft33 Newcomer 15 posts since
    Feb 24, 2009
    Currently Being Moderated
    1. Mar 13, 2013 2:24 PM (in response to gaztop1)
    Re: MSME 8.0 not recieving policies from ePO Exch 2010

    Same problem here. Policy updates take hours if they EVER arrive. What gives???

  • Aidan McAfee SME 465 posts since
    Nov 4, 2009

    Well the details above could suggest that no plicy is actually assigned for the machine or group its in.

    e.g if you have ExchangeServers Group with policy assignemnt and the server gets added to for example Lost & Found  - then it may not get policy changes.

     

    If you are stating that it is slow - then the policy enforcement interval is defined in the Agent Policy in ePO. 

    You can adjust that to check.

     

    You can also send wake upcalls to machines.

     

    You can also open local status monitor on the machine

         - right-click agent icon in systray select "McAfee Agent Status monitor"

         - run <agent install folder>\ cmdagent /s

    From this screen there is a button to check for new policies.

  • flitcraft33 Newcomer 15 posts since
    Feb 24, 2009
    Currently Being Moderated
    3. Mar 14, 2013 10:33 AM (in response to Aidan)
    Re: MSME 8.0 not recieving policies from ePO Exch 2010

    I definitely have a polcy assigned to my machines. When I first installed MSME8 it took them about half an hour to get it despite the fact that my machines call home every 5 minutes for policy updates (I have a smallish network so this is not a big deal). Also I got on the machines and used the GUI to request and apply policy updates over and over and sent props and events back manually also.  Since that first polciy that they finally recieved, they haven't gotten any of the changes I have made in the ePO console. I have goine into the MSME console and done the update on the dahsboard. Generally the task completes successfully according to the GUI but no changes show in policy manager even if I exit and restart the GUI or even stop and restart the service.

     

    Any help would be VERY welcome.

     

    Thanks all,

    Dan S

  • Aidan McAfee SME 465 posts since
    Nov 4, 2009

    Well a very quick test to see if its receiving any policy at all - check settings and diagnostics  - dat settings - there will be a dat retention number.

    Change it to something else - like if its 10 change it to 5.

    Close the interface.

    Open status monitor as above - click check new policies and/or enforce polices.

    Once done open interface - if the number has changed back to original number  then it looks like its getting some  sort of policy.

    If not no policy is applied.

     

    After this the agent logging may hold some info - C:\ProgramData\McAfee\Common Framework\DB\*.log

    If you are happy to post here I can look - but it will contain some internal on epo and ips repos used.

    Otherwise get a case open with support .

  • flitcraft33 Newcomer 15 posts since
    Feb 24, 2009
    Currently Being Moderated
    5. Mar 14, 2013 3:38 PM (in response to Aidan)
    Re: MSME 8.0 not recieving policies from ePO Exch 2010

    Thanks for the hint. I did as you suggested, the only error in the log afterwards seemed to be DAT related and already addressed in a document.  Sadly, the policy changing to retain 7 dats instead of 10 did not propogate. so much for lucky 7 .

     

    Unless anyone has any ideas I guess it's time to go to support.

     

    Cheers!

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points