Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
539 Views 0 Replies Latest reply: Sep 23, 2013 1:19 PM by justformartymar RSS
justformartymar Newcomer 2 posts since
Sep 23, 2013
Currently Being Moderated

Sep 23, 2013 1:19 PM

Mac Mountain Lion 10.8.5 not managed in EPO 4.6.5, McAfee agent successfully installed

I have an Issue of a Mac with Mountain Lion 10.8.5 not being managed in McAfee EPO 4.6.5, although the McAfee agent was successfully installed.  I am thinking I have a firewall issue on the Mac but am not sure.  I have supplied the following information:

 

9/19/13 1:57:25 PM Starting deployment to computer tech-xxxx through the Agent Handler MAINTENANCE.xxxx.dom
9/19/13 1:57:25 PM SSH Output: Looking up host "tech-xxxx"
9/19/13 1:57:25 PM SSH Output: Connecting to 10.1.1.180 port 22
9/19/13 1:57:25 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
9/19/13 1:57:25 PM SSH Output: Using SSH protocol version 2
9/19/13 1:57:25 PM SSH Output: We claim version: SSH-2.0-PuTTY_Snapshot_2010_02_18:r8871
9/19/13 1:57:25 PM SSH Output: Doing Diffie-Hellman group exchange
9/19/13 1:57:25 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
9/19/13 1:57:25 PM SSH Output: Host key fingerprint is:
9/19/13 1:57:25 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
9/19/13 1:57:25 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
9/19/13 1:57:25 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
9/19/13 1:57:25 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
9/19/13 1:57:25 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
9/19/13 1:57:25 PM SSH Output: Using username "dmartin".
9/19/13 1:57:25 PM SSH Output: Access granted
9/19/13 1:57:25 PM SSH Output: Opened channel for session
9/19/13 1:57:25 PM SSH Output: Started a shell/command
9/19/13 1:57:27 PM SSH Output: Using SFTP
9/19/13 1:57:27 PM SSH Output: Connected to tech-imac.xxxx.dom
9/19/13 1:57:27 PM SSH Output: Sending file install.sh
9/19/13 1:57:27 PM SSH Output: Sent EOF message
9/19/13 1:57:27 PM SSH Output: Server sent command exit status 0
9/19/13 1:57:27 PM SSH Output: Disconnected: All channels closed
9/19/13 1:57:28 PM SSH Output: Looking up host "tech-xxxx"
9/19/13 1:57:28 PM SSH Output: Connecting to 10.1.1.180 port 22
9/19/13 1:57:28 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
9/19/13 1:57:28 PM SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60
9/19/13 1:57:28 PM SSH Output: Using SSH protocol version 2
9/19/13 1:57:28 PM SSH Output: Doing Diffie-Hellman group exchange
9/19/13 1:57:28 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
9/19/13 1:57:28 PM SSH Output: Host key fingerprint is:
9/19/13 1:57:28 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
9/19/13 1:57:28 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
9/19/13 1:57:28 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
9/19/13 1:57:28 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
9/19/13 1:57:28 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
9/19/13 1:57:28 PM SSH Output: Using username "dmartin".
9/19/13 1:57:28 PM SSH Output: Access granted
9/19/13 1:57:28 PM SSH Output: Opened channel for session
9/19/13 1:57:28 PM SSH Output: Started a shell/command
9/19/13 1:57:28 PM SSH Output: Password:space required to copy archive is 35824768 bytes
9/19/13 1:57:28 PM SSH Output: space available at mfe8rOT5r is 3096245673984 bytes
9/19/13 1:57:28 PM SSH Output: extracting archive to mfe8rOT5r... please wait
9/19/13 1:57:28 PM SSH Output: 204+0 records in
9/19/13 1:57:28 PM SSH Output: 204+0 records out
9/19/13 1:57:28 PM SSH Output: 104448 bytes transferred in 0.000549 secs (190224344 bytes/sec)
9/19/13 1:57:28 PM SSH Output: 34766+1 records in
9/19/13 1:57:28 PM SSH Output: 34766+1 records out
9/19/13 1:57:28 PM SSH Output: 17800688 bytes transferred in 0.088575 secs (200967123 bytes/sec)
9/19/13 1:57:28 PM SSH Output: Archive: mfe8rOT5r/package.zip
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/MFEcma.dmg
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/reqseckey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/srpubkey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/sitelist.xml
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/req2048seckey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/sr2048pubkey.bin
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/agentfipsmode
9/19/13 1:57:29 PM SSH Output: inflating: mfe8rOT5r/RepoKeys.ini
9/19/13 1:57:29 PM SSH Output: Checksumming whole disk (Apple_HFS : 0)…
9/19/13 1:57:29 PM SSH Output: whole disk (Apple_HFS : 0): verified CRC32 $7A4857A0
9/19/13 1:57:29 PM SSH Output: verified CRC32 $78632BE7
9/19/13 1:57:31 PM SSH Output: /dev/disk3 /Volumes/MFECMA
9/19/13 1:57:37 PM SSH Output: installer: Package name is McAfee Agent
9/19/13 1:57:37 PM SSH Output: installer: Installing at base path /
9/19/13 1:57:37 PM SSH Output: installer: The install was successful.
9/19/13 1:57:41 PM SSH Output: "disk3" unmounted.
9/19/13 1:57:41 PM SSH Output: "disk3" ejected.
9/19/13 1:57:41 PM SSH Output: Server sent command exit status 0
9/19/13 1:57:41 PM SSH Output: Disconnected: All channels closed
9/19/13 1:57:42 PM SSH Output: Looking up host "tech-xxxx"
9/19/13 1:57:42 PM SSH Output: Connecting to 10.1.1.180 port 22
9/19/13 1:57:42 PM SSH Output: Server version: SSH-2.0-OpenSSH_5.9
9/19/13 1:57:42 PM SSH Output: We claim version: SSH-2.0-PuTTY_Release_0.60
9/19/13 1:57:42 PM SSH Output: Using SSH protocol version 2
9/19/13 1:57:42 PM SSH Output: Doing Diffie-Hellman group exchange
9/19/13 1:57:42 PM SSH Output: Doing Diffie-Hellman key exchange with hash SHA-256
9/19/13 1:57:42 PM SSH Output: Host key fingerprint is:
9/19/13 1:57:42 PM SSH Output: ssh-rsa 2048 bc:aa:ac:da:6a:12:7d:af:02:36:5e:89:35:41:a0:a6
9/19/13 1:57:42 PM SSH Output: Initialised AES-256 SDCTR client->server encryption
9/19/13 1:57:42 PM SSH Output: Initialised HMAC-SHA1 client->server MAC algorithm
9/19/13 1:57:42 PM SSH Output: Initialised AES-256 SDCTR server->client encryption
9/19/13 1:57:42 PM SSH Output: Initialised HMAC-SHA1 server->client MAC algorithm
9/19/13 1:57:42 PM SSH Output: Using username "dmartin".
9/19/13 1:57:42 PM SSH Output: Access granted
9/19/13 1:57:42 PM SSH Output: Opened channel for session
9/19/13 1:57:42 PM SSH Output: Started a shell/command
9/19/13 1:57:42 PM SSH Output: Server sent command exit status 0
9/19/13 1:57:42 PM SSH Output: Disconnected: All channels closed
9/19/13 1:57:43 PM

Deploy agent installation package to target system was successful

 

I can see the cma is running on the Mac:

 

Mac cma.PNG

 

I opened firewall ports on the Mac to insure the needed ports were open to communicate with the EPO server:

 

Mac ports.PNG

But when I do a scan ports, I do not see the correct ports open.  I the IP addressed changed over the last few days (DHCP) of troubleshooting so it is not the same as the initial install as the log above:

 

Mac scanned ports.PNG

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points