3 Replies Latest reply on Jun 3, 2014 4:50 AM by mcdave

    clients do not use the agent handlers

    mcdave

      Hi,

       

      I just noticed that our clients do not use our agent handlers anymore (they still did a few weeks ago).

       

      All (4) our agent handlers are active.

       

      I've tried rebooting our agenthandlers and forcing wakeup call via one of the agent handlers (at least the McAfee Agent Activity (web)Log do list all the AHs).

       

      (We're using an epo 5.1 environment and our AH's are also configured as SuperAgents)

       

      Any ideas?

      Can I reconfigure an AH without reinstalling it?

       

      regards,

      Dave

        • 1. Re: clients do not use the agent handlers
          cupajotogo

          Hi mcdave, I'm new to McAfee Communities but I might be able to give you some things to think about. My first thought was to encourage you to look at your policies for the endpoints that are not using the AH's anymore. Specifically it would be the McAfee Agent policies. Perhaps there was an accidental change that pointed them somewhere else (aka modified their sitelist.xml). Best way to verify this is to remote into one of the systems and do an Update with the McAfee Agent Status Monitor up... watch what system the endpoint is looking to to get its update. Of course, you can also watch the log from ePO.

           

          Whatever the case a copy of that log to this discussion might prove helpful.

           

          I'm not 100% sure about your last question. My gut tells me you have to reinstall it but I may be wrong.

          Thanks,

          Cupajotogo

          • 2. Re: clients do not use the agent handlers
            Laszlo G

            Hi mcdave, you should first check under your epo server whether your agent handlers are online or not. Once you have checked this and the AH assignement policies

            • 3. Re: clients do not use the agent handlers
              mcdave

              Sorry for the delayed reply (official holidays )
              One week later (after restarting all the handlers a week ago) there is a very very very little amount of client reporting via agent handlers but it's faaaaaar to less in the past it was equally spread (25% per handler)

               

              As you can see we use the default assignment rule that usses all agent handlers (and yes all handlers a online as you can see )

               

              3-06-2014 11-42-44.png

               

              3-06-2014 11-46-52.png

               

              Message was edited by: mcdave on 03/06/14 04:50:06 CDT