1 2 Previous Next 18 Replies Latest reply on Nov 3, 2014 7:12 AM by llamamecomoquieras

    Problem With Anti-virus Mcafee

    anthonycir

      Hello,

       

      I have got a server with Mcafee, i can deploy the agent mcafee in the computers which are in my network. But when i want toscan (VSE8) a computer it's not working ...

       

      VSE8 :

       

      Erreur mcafee.jpg

       

      Error:

       

      mcafee 2.jpg

       

      Can someone help me?

       

      Thank you

       

      Anthony

        • 1. Re: Problem With Anti-virus Mcafee
          fitchsoccer342

          What OS & McAfee Agent is running on the machine you are trying to deploy VSE 8.8 to? Also what version of VSE are you trying to deploy? How many machines are you trying to deploy to?

           

          You can also look at the log file on the machine you are trying to deploy VSE to and see why it is failing - the log should be in C:\Windows\Temp\McAfeeLogs if the task made it that far.

          • 2. Re: Problem With Anti-virus Mcafee
            anthonycir

            Hello,

             

            The OS is Windows 7 Pro, the version of mcafee is 4.8.0.1500 on the machine. I try to deploy the version 8.8.0 of the VSE. For the moment i try for 1 machine.

             

            I looked for the logs in the C:\Windows\Temp\McAfeeLogs but the logs are too old ... there are not logs since 3/31/2014.

             

            Thank you for your help Fitchsoccer342

             

            Anthony

            • 3. Re: Problem With Anti-virus Mcafee
              frank_enser

              Hi,

               

              look at the agent logs on the endpoint. It's located at %ALLUSERSPROFILE%\McAfee\Common Framework\DB. You should find the invocation of the deployment task (and a more detailed error description) there.

               

              Regards,

              Frank

              • 4. Re: Problem With Anti-virus Mcafee
                anthonycir

                Thank you Frank Enser,

                 

                Start task : 30/10/14 11:09:01

                End task : 30/10/14 11:13:07

                 

                I have the log :

                 

                2014-10-30 11:06:44.493    i    #4744    Agent    Next policy enforcement in 5 minutes

                2014-10-30 11:09:25.008    I    #4736    Agent    Sending the next batch of immediate events

                2014-10-30 11:09:25.008    i    #4736    Agent    Agent is looking for events to upload

                2014-10-30 11:09:25.008    I    #4736    Agent    Agent did not find any events to upload

                2014-10-30 11:11:44.493    i    #4744    Agent    Agent Started Enforcing policies

                2014-10-30 11:11:44.493    I    #4744    Agent    Thread time-out occurred

                2014-10-30 11:11:44.493    I    #4744    Manage    Enforcing policies

                2014-10-30 11:11:44.493    i    #4744    Manage    Enforcing Policies for McAfee Agent

                2014-10-30 11:11:44.493    I    #4744    Agent    CePOAgent::EnforcePolicy priority=-2

                2014-10-30 11:11:44.493    I    #4744    Agent    Enforcing policies

                2014-10-30 11:11:44.493    I    #4744    LstnSvr    Enforcing Policies

                2014-10-30 11:11:44.493    I    #4744    Datastore    Did not find setting bEnableP2PService in section AgentListenServer for software ID EPOAGENT3000

                2014-10-30 11:11:44.493    I    #4744    LstnSvr    Relay policy is disabled, hence, shutting down the service manager.

                2014-10-30 11:11:44.508    I    #4744    LstnSvr    EnforcePolicies--Service Manager stopped.

                2014-10-30 11:11:44.508    I    #4744    Logging    Enforcing policies

                2014-10-30 11:11:44.508    I    #4744    Manage    Enforcing policies

                2014-10-30 11:11:44.524    I    #4744    UsrSpCt    Enforcing policies

                2014-10-30 11:11:44.524    I    #4744    UsrSpCt    Token not found. Will try to get it from shell

                2014-10-30 11:11:44.524    I    #4744    UsrSpCt    Found shell token

                2014-10-30 11:11:44.524    I    #4744    UsrSpCt    Try to Launch UdaterUI Again

                2014-10-30 11:11:44.524    I    #4744    UsrSpCt    Don't launch UpdaterUI for Terminal Services remote session 1 (console session is 0)

                2014-10-30 11:11:44.524    I    #4744    Sched    >>--CSchedule::EnforcePolicy

                2014-10-30 11:11:44.524    I    #4744    Sched    >>--CSchedule::ModifyTask

                2014-10-30 11:11:44.540    I    #4744    Sched    <<--CSchedule::ModifyTask

                2014-10-30 11:11:44.540    I    #4744    Sched    Tâche de déploiement créée avec la configuration assistée - Last run time(local) is Mon Mar 31 11:44:50 2014

                2014-10-30 11:11:44.540    I    #4744    Sched

                2014-10-30 11:11:44.540    I    #4744    Sched    0 fields of the task 15 are updated successfully

                2014-10-30 11:11:44.540    I    #4744    Sched    >>--CSchedule::ModifyTask

                2014-10-30 11:11:44.540    I    #4744    Sched    <<--CSchedule::ModifyTask

                2014-10-30 11:11:44.555    I    #4744    Sched    Tâche de mise à jour créée avec la configuration assistée - Last run time(local) is Thu Oct 30 11:00:00 2014

                2014-10-30 11:11:44.555    I    #4744    Sched

                2014-10-30 11:11:44.555    I    #4744    Sched    0 fields of the task 2 are updated successfully

                2014-10-30 11:11:44.555    I    #4744    Sched    RunAtEnforcementEnabled not found in the task settings

                2014-10-30 11:11:44.555    I    #4744    Sched    >>--CSchedule::GetTask

                2014-10-30 11:11:44.555    I    #4744    Sched    <<--CSchedule::GetTask

                2014-10-30 11:11:44.555    I    #4744    Sched    >>--CSchedule::GetTask

                2014-10-30 11:11:44.555    I    #4744    Sched    <<--CSchedule::GetTask

                2014-10-30 11:11:44.555    I    #4744    Sched    <<--CSchedule::EnforcePolicy

                2014-10-30 11:11:44.555    I    #4744    Datastore    Did not find setting version in section Telemetry for software ID EPOAGENT3000

                2014-10-30 11:11:44.555    I    #4744    Manage    Policy enforcement is currently enabled

                2014-10-30 11:11:44.555    I    #4744    Manage    PIP task was not scheduled- PIP Package might not be avilable in repository or PIP deployment was opt out by policies

                2014-10-30 11:11:44.555    I    #4744    Manage    Initializing Event Interface

                2014-10-30 11:11:44.555    I    #4744    Manage    EpoEventInf Interface: Initialization succeeded.

                2014-10-30 11:11:44.633    i    #4744    Manage    Enforcing Policies for VIRUSCAN8800

                2014-10-30 11:11:44.665    i    #4744    Manage    Enforcing Policies for EPOAGENT3000META

                2014-10-30 11:11:44.665    i    #4744    Manage    Enforcing Policies for EPOAGENT3000

                2014-10-30 11:11:44.680    i    #4744    Manage    Enforcing Policies for TELEMTRY1000

                2014-10-30 11:11:44.680    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:11:44.743    I    #4744    Manage    There are no policies for (...\.anthonycir to enforce to TELEMTRY1000.

                2014-10-30 11:11:44.743    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:11:44.821    i    #4744    Manage    Enforcing Policies for HOSTIPS_8000

                2014-10-30 11:11:44.821    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:11:48.305    I    #4744    Manage    There are no policies for (..\anthonycir) to enforce to HOSTIPS_8000.

                2014-10-30 11:11:48.305    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:11:50.899    I    #4744    Manage    DeInitializing Event Interface

                2014-10-30 11:11:50.899    I    #4744    Manage    EpoEventInf Interface: Deinitialization succeeded.

                2014-10-30 11:11:50.899    i    #4744    Agent    Agent finished Enforcing policies

                2014-10-30 11:11:50.899    i    #4744    Agent    Next policy enforcement in 5 minutes

                2014-10-30 11:14:25.008    I    #4736    Agent    Sending the next batch of immediate events

                2014-10-30 11:14:25.008    i    #4736    Agent    Agent is looking for events to upload

                2014-10-30 11:14:25.008    I    #4736    Agent    Agent did not find any events to upload

                2014-10-30 11:16:50.899    i    #4744    Agent    Agent Started Enforcing policies

                2014-10-30 11:16:50.899    I    #4744    Agent    Thread time-out occurred

                2014-10-30 11:16:50.899    I    #4744    Manage    Enforcing policies

                2014-10-30 11:16:50.899    i    #4744    Manage    Enforcing Policies for McAfee Agent

                2014-10-30 11:16:50.899    I    #4744    Agent    CePOAgent::EnforcePolicy priority=-2

                2014-10-30 11:16:50.899    I    #4744    Agent    Enforcing policies

                2014-10-30 11:16:50.915    I    #4744    LstnSvr    Enforcing Policies

                2014-10-30 11:16:50.915    I    #4744    Datastore    Did not find setting bEnableP2PService in section AgentListenServer for software ID EPOAGENT3000

                2014-10-30 11:16:50.915    I    #4744    LstnSvr    Relay policy is disabled, hence, shutting down the service manager.

                2014-10-30 11:16:50.930    I    #4744    LstnSvr    EnforcePolicies--Service Manager stopped.

                2014-10-30 11:16:50.930    I    #4744    Logging    Enforcing policies

                2014-10-30 11:16:50.930    I    #4744    Manage    Enforcing policies

                2014-10-30 11:16:50.946    I    #4744    UsrSpCt    Enforcing policies

                2014-10-30 11:16:50.946    I    #4744    UsrSpCt    Token not found. Will try to get it from shell

                2014-10-30 11:16:50.946    I    #4744    UsrSpCt    Found shell token

                2014-10-30 11:16:50.946    I    #4744    UsrSpCt    Try to Launch UdaterUI Again

                2014-10-30 11:16:50.946    I    #4744    UsrSpCt    Don't launch UpdaterUI for Terminal Services remote session 1 (console session is 0)

                2014-10-30 11:16:50.946    I    #4744    Sched    >>--CSchedule::EnforcePolicy

                2014-10-30 11:16:50.946    I    #4744    Sched    >>--CSchedule::ModifyTask

                2014-10-30 11:16:50.961    I    #4744    Sched    <<--CSchedule::ModifyTask

                2014-10-30 11:16:50.961    I    #4744    Sched    Tâche de déploiement créée avec la configuration assistée - Last run time(local) is Mon Mar 31 11:44:50 2014

                2014-10-30 11:16:50.961    I    #4744    Sched  

                2014-10-30 11:16:50.961    I    #4744    Sched    0 fields of the task 15 are updated successfully

                2014-10-30 11:16:50.961    I    #4744    Sched    >>--CSchedule::ModifyTask

                2014-10-30 11:16:50.961    I    #4744    Sched    <<--CSchedule::ModifyTask

                2014-10-30 11:16:50.961    I    #4744    Sched    Tâche de mise à jour créée avec la configuration assistée - Last run time(local) is Thu Oct 30 11:00:00 2014

                2014-10-30 11:16:50.961    I    #4744    Sched  

                2014-10-30 11:16:50.961    I    #4744    Sched    0 fields of the task 2 are updated successfully

                2014-10-30 11:16:50.961    I    #4744    Sched    RunAtEnforcementEnabled not found in the task settings

                2014-10-30 11:16:50.977    I    #4744    Sched    >>--CSchedule::GetTask

                2014-10-30 11:16:50.977    I    #4744    Sched    <<--CSchedule::GetTask

                2014-10-30 11:16:50.977    I    #4744    Sched    >>--CSchedule::GetTask

                2014-10-30 11:16:50.977    I    #4744    Sched    <<--CSchedule::GetTask

                2014-10-30 11:16:50.977    I    #4744    Sched    <<--CSchedule::EnforcePolicy

                2014-10-30 11:16:50.977    I    #4744    Datastore    Did not find setting version in section Telemetry for software ID EPOAGENT3000

                2014-10-30 11:16:50.977    I    #4744    Manage    Policy enforcement is currently enabled

                2014-10-30 11:16:50.977    I    #4744    Manage    PIP task was not scheduled- PIP Package might not be avilable in repository or PIP deployment was opt out by policies

                2014-10-30 11:16:50.977    I    #4744    Manage    Initializing Event Interface

                2014-10-30 11:16:50.977    I    #4744    Manage    EpoEventInf Interface: Initialization succeeded.

                2014-10-30 11:16:51.040    i    #4744    Manage    Enforcing Policies for VIRUSCAN8800

                2014-10-30 11:16:51.086    i    #4744    Manage    Enforcing Policies for EPOAGENT3000META

                2014-10-30 11:16:51.086    i    #4744    Manage    Enforcing Policies for EPOAGENT3000

                2014-10-30 11:16:51.102    i    #4744    Manage    Enforcing Policies for TELEMTRY1000

                2014-10-30 11:16:51.102    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:16:51.165    I    #4744    Manage    There are no policies for ..\anthonycir to enforce to TELEMTRY1000.

                2014-10-30 11:16:51.165    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:16:51.227    i    #4744    Manage    Enforcing Policies for HOSTIPS_8000

                2014-10-30 11:16:51.227    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:16:54.618    I    #4744    Manage    There are no policies for ..\anthonycir to enforce to HOSTIPS_8000.

                2014-10-30 11:16:54.618    I    #4744    MsgQueue    Posting message to message queue

                2014-10-30 11:16:57.227    I    #4744    Manage    DeInitializing Event Interface

                2014-10-30 11:16:57.227    I    #4744    Manage    EpoEventInf Interface: Deinitialization succeeded.

                2014-10-30 11:16:57.227    i    #4744    Agent    Agent finished Enforcing policies

                2014-10-30 11:16:57.227    i    #4744    Agent    Next policy enforcement in 5 mi

                 

                If you have a solution

                 

                Anthony

                • 5. Re: Problem With Anti-virus Mcafee
                  llamamecomoquieras

                  Hi,

                   

                  Can you please make sure you have the MA latest extension installed? If you are not sure please try to check the latest extension and it will tell you if you already have the latest and if not please replace the old one with the latest extension and try again. You can download the latest extension from ePO (software manager) or from the McAfee download site under McAfee Agent (EPOAGENTMETA)

                   

                  Best regards,

                   

                  Jose Maria

                  • 6. Re: Problem With Anti-virus Mcafee
                    anthonycir

                    Thank you for you help llamamecomoquieras,

                     

                    But your explication it's too complicated for me ^^. I looked for the ePO extension i don't have the login/password to download it on mcafee

                     

                    I will try when i will have the login/password

                     

                    Sorry for my English.

                     

                    Anthony

                    • 7. Re: Problem With Anti-virus Mcafee
                      llamamecomoquieras

                      No worries Anthony I am sure my english is not better than yours.

                       

                      Please, let me know when you can chek that, but as I said you could do it from ePO if you can login in the console.

                       

                      I am attaching an screenshot how you can do that from ePO.

                       

                      1.jpg

                       

                       

                      2.jpg

                       

                      As I said, if you have any question please do not hesitate to ask.

                       

                      Best regards,

                       

                      Jose Maria

                      • 8. Re: Problem With Anti-virus Mcafee
                        frank_enser

                        Looks like you already have VSE8.8 installed:

                        2014-10-30 11:11:44.633i#4744ManageEnforcing Policies for VIRUSCAN8800
                        • 9. Re: Problem With Anti-virus Mcafee
                          anthonycir

                          Thanks,

                           

                          I have got :

                           

                          patch.jpg

                          1 2 Previous Next