9 Replies Latest reply on Apr 18, 2016 6:35 AM by Troja

    VSE 8.8 Patch 7 update order

    wyle008

      Hello

       

      We have currently the following McAfee products installed on our clients:

       

      VSE 8.8 Patch 4

      McAfee Agent 5.0.2.132

       

      Can someone advice how to update to the latest Versions VSE 8.8 Patch 7 and McAfee Agent 5.0.2.333 (update order)?

       

      I am asking because the release notes for McAfee Agent 5.0.2.333 states the following:

       

      Note: If intending to use Patch 7 as the prerequisite, Patch 7 is restricted to installing on MA 5.0.2.188 and you must follow these steps:

      1. Install or upgrade to MA 5.0.2.188

      2. Install or upgrade to VSE 8.8.0 Patch 7

      3. Upgrade to MA 5.0.2.333

       

      On the other Hand the release notes for McAfee Agent 5.0.2.188 states that it was developed for use with VSE Patch 5 or Patch 6.

       

      Does that mean that we first have to update to VSE Patch 5 or 6, then update to McAfee Agent 5.0.2.188, then update to VSE Patch 7 and last but not least McAfee Agent 5.0.2.333??? Not really right?

       

      Kind regards

      Wyle

        • 1. Re: VSE 8.8 Patch 7 update order
          andrep1

          In the release notes for the agent, at the end:

           

          VirusScan Enterprise 8.8.0 Patch 5/6 Hotfix 1087536 or VirusScan Enterprise 8.8.0 Patch 7 should be installed on the client machines prior to upgrade of McAfee Agent 5.0.2 Hotfix 1110392.


          Nothing like testing it and looking at the generated events...

          • 2. Re: VSE 8.8 Patch 7 update order
            wyle008

            andrep1

            Picking up this one again.

             

            Also in the release notes for the Agent:

             

            Note: If intending to use Patch 7 as the prerequisite, Patch 7 is restricted to installing on MA 5.0.2.188 and you must follow these steps:

            1. Install or upgrade to MA 5.0.2.188

            2. Install or upgrade to VSE 8.8.0 Patch 7

            3. Upgrade to MA 5.0.2.333

             

            Do you know if there is a reason doing the update this way?

             

            I am asking because in our environment i was able to update MA 5.0.2.132 to MA 5.0.2.333 and afterwards to update VSE 8.8.0 Patch 4 to VSE 8.8.0 Patch 7. It seems that Patch 7 is not restricted to install it only on MA 5.0.2.188 as it is also possible to install it on MA 5.0.2.333.

            • 3. Re: VSE 8.8 Patch 7 update order
              andrep1

              Haven't crossed that bridge yet, focussing on mcdatrep 1.0.4 dependency for now.

              I've found the following in kb51111

              McAfee Agent (MA)

              The following MA versions are minimally required.

               

              NOTES:

              • MA was formerly Common Management Agent.
              • Refer to the MA documentation to ensure which version is supported on your operating system.
              • To view the version (Build) information for: 
              ProductMinimum MA version
              VSE 8.8 Patch 7MA 5.0 (Build 5.0.2.188) 1
                MA 5.0 (Build 5.0.2.333) 2
                MA 4.8 (Build 4.8.0.1500) and later 4.x versions
              VSE 8.8 Patch 6MA 5.0 (Build 5.0.0.2620)
                MA 4.8 (Build 4.8.0.1500)
              VSE 8.8 Patch 4, 5MA 5.0 (Build 5.0.0.2620)
                MA 4.8 (Build 4.8.0.1500)
              VSE 8.8 through Patch 3MA 4.8 (Build 4.8.0.1500)

              1VSE 8.8 Patch 7 supports MA 5.2 (Build 5.0.2.188), but other McAfee products might experience compatibility issues. See KB79397.
              2Patch 7 supports McAfee Agent version 5.0.2.333; however this version of McAfee Agent has installation requirements. See the Release Notes for McAfee Agent 5.0.2 Hotfix 1110392 for information (PD26386).
              • 4. Re: Re: VSE 8.8 Patch 7 update order
                cybercafe

                Recommended Installation Sequence

                https://kc.mcafee.com/corporate/index?page=content&id=SB10151

                 


                The fix involved re-architecting the self-protection mechanisms in VSE, which functionally impacts multiple products. This architecture change creates an installation dependency between MA 5.0.2.333 and VSE 8.8.0.1528. Please follow the recommended installation sequence to update to MA 5.0.2.333 and VSE 8.8.0.1528 or later.

                 

                Table A: Product Update Versions Sorted By Release Date

                 

                The following product versions are referenced in Table B below.

                 

                ProductVersionRelease BuildPackage Date
                VSE8.8.0 Patch 5/6 Hotfix 10875368.8.0.1478October 1, 2015
                MA5.0.2 Hotfix 10910275.0.2.188November 18, 2015
                VSE8.8.0 Patch 78.8.0.1528February 12, 2016
                MA5.0.2 Hotfix 11103925.0.2.333February 25, 2016


                Table B: Install Sequence Chart

                 

                Refer to the following Installation Sequence Chart for guidance.

                 

                Scenario 1Scenario 2Scenario 3Scenario 4Scenario 5
                Starting Point for Products InstalledVSE 8.8.0.1478:
                No

                 

                MA 5.0.2.188:
                No
                VSE 8.8.0.1478: 
                Yes

                 

                MA 5.0.2.188:
                Yes
                VSE 8.8.0.1478: 
                No

                 

                MA 5.0.2.188:
                Yes
                VSE:
                Not Installed

                 

                MA: 4.x or 5.x:
                Yes
                VSE 8.8.0.1478:
                Yes

                 

                MA 5.0.2.188:
                No

                 

                MA 4.x:
                Yes
                Recommended Installation Sequence for Upgrade
                1. First Install: MA 5.0.2.188
                2. Then Install: VSE 8.8.0.1528
                3. Then Install MA 5.0.2.333
                1. First Install: VSE 8.8.0.1528
                2. Then Install: MA 5.0.2.333
                Upgrade to MA 5.0.2.333OnlyInstall:

                 

                VSE 8.8.0.1528

                 

                Leave MA at MA 4.x
                Impact of Not Following Recommended SequenceNo Impact.

                 

                The VSE 8.8.0.1528 installer checks to ensure that MA 5.0.2.188 or MA 5.0.2.333 is installed first.

                 

                If you  attempt to install VSE 8.8.0.1478 after MA 5.0.2.333, the install will fail. Instead, install VSE 8.8.0.1528 directly.
                No Impact.

                 

                However, you  must upgrade to bothMA 5.0.2.333 and VSE 8.8.0.1528.

                 

                If only VSE 8.8.0.1528 is installed and not MA 5.0.2.333, product functionality will be impacted, as described in the following articles:
                If no intent to install VSE, ensure MA is upgraded to 5.0.2.333.

                 

                Otherwise, product functionality will be impacted as described in article: KB83895.
                No Impact.
                Remediation if Impact OccursInstall VSE 8.8.0.1528Ensure both MA 5.0.2.333 and VSE 8.8.0.1528 are installedInstall MA 5.0.2.333N/A
                • 5. Re: VSE 8.8 Patch 7 update order
                  Troja

                  Hi cybercafe,

                  can you please share the KB for this list?

                  Cheers

                  • 6. Re: VSE 8.8 Patch 7 update order
                    cybercafe

                    Sure.

                    Check Recommended Installation Sequence in the following link:

                    https://kc.mcafee.com/corporate/index?page=content&id=SB10151

                    • 7. Re: VSE 8.8 Patch 7 update order
                      Daniel_S

                      I´m just in the same situation right now.

                      I also read the articles and they seem to be somehow confusing.

                      Like in your case regarding the install sequence chart we have scenario 1.

                      So normally one should upgrade Agent to .188, then Update P7 VSE and then Agent again.

                      The next line says there is no impact if not doing so and that is exactly what I can see here.

                      Update all our clients (>300) to Agent .333 and now have like 35 machines running with P7 VSE.

                      Everythin deployed without errors and everything seems to work without problems by now.

                      • 8. Re: VSE 8.8 Patch 7 update order
                        wyle008

                        Thank you Daniel_S for sharing your experience.

                         

                        Can someone provide a good reason for not updating directly to 5.0.2.333 and then to VSE Patch 7 or has someone else already updated this way and can share his experience?

                        • 9. Re: VSE 8.8 Patch 7 update order
                          Troja

                          Hi,

                          from my side, i always check if the patch resolves a issue i have. If not, i have no need to update.

                           

                          At any project at the Moment (10000+ endpoints) we are really testing in detail when updating McAfee products. :-)

                           

                          This week a customer reported a Problem with the given update procedure. I think it depends, because this customer is also using FRM and DLP.

                          So they tested what is working and defined a update procedure for themselves.

                           

                          Cheers