0 Replies Latest reply: Sep 23, 2013 1:19 PM by justformartymar RSS

    Mac Mountain Lion 10.8.5 not managed in EPO 4.6.5, McAfee agent successfully installed

    justformartymar

      I have an Issue of a Mac with Mountain Lion 10.8.5 not being managed in McAfee EPO 4.6.5, although the McAfee agent was successfully installed.  I am thinking I have a firewall issue on the Mac but am not sure.  I have supplied the following information:

       

      9/19/13 1:57:25 PM Starting deployment to computer tech-xxxx through the Agent Handler MAINTENANCE.xxxx.dom
      9/19/13 1:57:25 PM SSH Output: Looking up host "tech-xxxx"
      9/19/13 1:57:25 PM SSH Output: Connecting to 10.1.1.180 port 22
      9/19/13 1:57:25 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
      9/19/13 1:57:25 PM SSH Output: Using SSH protocol version 2
      9/19/13 1:57:25 PM SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871
      9/19/13 1:57:25 PM SSH Output: Doing Diffie-Hellman group exchange
      9/19/13 1:57:25 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
      9/19/13 1:57:25 PM SSH Output: Host key fingerprint is:
      9/19/13 1:57:25 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
      9/19/13 1:57:25 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
      9/19/13 1:57:25 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
      9/19/13 1:57:25 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
      9/19/13 1:57:25 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
      9/19/13 1:57:25 PM SSH Output: Using username "dmartin".
      9/19/13 1:57:25 PM SSH Output: Access granted
      9/19/13 1:57:25 PM SSH Output: Opened channel for session
      9/19/13 1:57:25 PM SSH Output: Started a shell/command
      9/19/13 1:57:27 PM SSH Output: Using SFTP
      9/19/13 1:57:27 PM SSH Output: Connected to tech-imac.xxxx.dom
      9/19/13 1:57:27 PM SSH Output: Sending file install.sh
      9/19/13 1:57:27 PM SSH Output: Sent EOF message
      9/19/13 1:57:27 PM SSH Output: Server sent command exit status 0
      9/19/13 1:57:27 PM SSH Output: Disconnected: All channels closed
      9/19/13 1:57:28 PM SSH Output: Looking up host "tech-xxxx"
      9/19/13 1:57:28 PM SSH Output: Connecting to 10.1.1.180 port 22
      9/19/13 1:57:28 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
      9/19/13 1:57:28 PM SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60
      9/19/13 1:57:28 PM SSH Output: Using SSH protocol version 2
      9/19/13 1:57:28 PM SSH Output: Doing Diffie-Hellman group exchange
      9/19/13 1:57:28 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
      9/19/13 1:57:28 PM SSH Output: Host key fingerprint is:
      9/19/13 1:57:28 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
      9/19/13 1:57:28 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
      9/19/13 1:57:28 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
      9/19/13 1:57:28 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
      9/19/13 1:57:28 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
      9/19/13 1:57:28 PM SSH Output: Using username "dmartin".
      9/19/13 1:57:28 PM SSH Output: Access granted
      9/19/13 1:57:28 PM SSH Output: Opened channel for session
      9/19/13 1:57:28 PM SSH Output: Started a shell/command
      9/19/13 1:57:28 PM SSH Output: Password:space required to copy archive is 35824768 bytes
      9/19/13 1:57:28 PM SSH Output: space available at mfe8rOT5r is 3096245673984 bytes
      9/19/13 1:57:28 PM SSH Output: extracting archive to mfe8rOT5r... please wait
      9/19/13 1:57:28 PM SSH Output: 204+0 records in
      9/19/13 1:57:28 PM SSH Output: 204+0 records out
      9/19/13 1:57:28 PM SSH Output: 104448 bytes transferred in 0.000549 secs (190224344 bytes/sec)
      9/19/13 1:57:28 PM SSH Output: 34766+1 records in
      9/19/13 1:57:28 PM SSH Output: 34766+1 records out
      9/19/13 1:57:28 PM SSH Output: 17800688 bytes transferred in 0.088575 secs (200967123 bytes/sec)
      9/19/13 1:57:28 PM SSH Output: Archive: mfe8rOT5r/package.zip
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/MFEcma.dmg
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/reqseckey.bin
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/srpubkey.bin
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/sitelist.xml
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/req2048seckey.bin
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/sr2048pubkey.bin
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/agentfipsmode
      9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/RepoKeys.ini
      9/19/13 1:57:29 PM SSH Output: Checksumming whole disk (Apple_HFS : 0)…
      9/19/13 1:57:29 PM SSH Output: whole disk (Apple_HFS : 0): verified CRC32 $7A4857A0
      9/19/13 1:57:29 PM SSH Output: verified CRC32 $78632BE7
      9/19/13 1:57:31 PM SSH Output: /dev/disk3 /Volumes/MFECMA
      9/19/13 1:57:37 PM SSH Output: installer: Package name is McAfee Agent
      9/19/13 1:57:37 PM SSH Output: installer: Installing at base path /
      9/19/13 1:57:37 PM SSH Output: installer: The install was successful.
      9/19/13 1:57:41 PM SSH Output: "disk3" unmounted.
      9/19/13 1:57:41 PM SSH Output: "disk3" ejected.
      9/19/13 1:57:41 PM SSH Output: Server sent command exit status 0
      9/19/13 1:57:41 PM SSH Output: Disconnected: All channels closed
      9/19/13 1:57:42 PM SSH Output: Looking up host "tech-xxxx"
      9/19/13 1:57:42 PM SSH Output: Connecting to 10.1.1.180 port 22
      9/19/13 1:57:42 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
      9/19/13 1:57:42 PM SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60
      9/19/13 1:57:42 PM SSH Output: Using SSH protocol version 2
      9/19/13 1:57:42 PM SSH Output: Doing Diffie-Hellman group exchange
      9/19/13 1:57:42 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
      9/19/13 1:57:42 PM SSH Output: Host key fingerprint is:
      9/19/13 1:57:42 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
      9/19/13 1:57:42 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
      9/19/13 1:57:42 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
      9/19/13 1:57:42 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
      9/19/13 1:57:42 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
      9/19/13 1:57:42 PM SSH Output: Using username "dmartin".
      9/19/13 1:57:42 PM SSH Output: Access granted
      9/19/13 1:57:42 PM SSH Output: Opened channel for session
      9/19/13 1:57:42 PM SSH Output: Started a shell/command
      9/19/13 1:57:42 PM SSH Output: Server sent command exit status 0
      9/19/13 1:57:42 PM SSH Output: Disconnected: All channels closed
      9/19/13 1:57:43 PM

      Deploy agent installation package to target system was successful

       

      I can see the cma is running on the Mac:

       

      Mac cma.PNG

       

      I opened firewall ports on the Mac to insure the needed ports were open to communicate with the EPO server:

       

      Mac ports.PNG

      But when I do a scan ports, I do not see the correct ports open.  I the IP addressed changed over the last few days (DHCP) of troubleshooting so it is not the same as the initial install as the log above:

       

      Mac scanned ports.PNG