FramePkg
  • Home
  • About
  • Procedures
    • ePO Upgrade
    • ePO Architecture
    • BackUp ePO
    • How To Uninstall McAfee Client Manually
    • McAfee Drive Encryption
    • TIE Guide - A to Z Steps
  • ePO
  • VSE
  • DLP
  • HIPS
  • Solutions
  • Tips
  • Videos
  • Online Updates

Failed to upload file SiteStat.xml to site mcafeesa.esl.corp.elbit.co.il:8026, error code 5 ( Access is denied. )

16/3/2017

0 Comments

 
Problem:

Superagent stop updating.
Error: Failed to upload file SiteStat.xml to site Servername.domain.com:8026, error code 5 ( Access is denied. )
Picture
Solution:

Make sure which user run the McAfee Agent Services
Picture
Give full permission to the user that run the services of the McAfee agent to the following folders:
1. On the folder that hold the McAfee Update,(Configure via policy) 
2. On the Folder: 
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
Picture
Make sure which folder you configure for the superagent update folder
Picture
​
0 Comments

systems DISAPPEARING from epo

28/8/2016

0 Comments

 
Problem:

One of these problems occurred:

- System disappearing from ePO
- System re registering in ePO
- System reappear in Lost&found

one of the scenarios is happening while the systems are connection via VPN. 

What is happening:

You encounter this problem only when the first connection from a client to the ePO server takes place over a VPN connection. If the computer's first connection is via a Local Area Network (LAN), the correct Media Access Control (MAC) address is added to the table.
 
When a computer communicates with the ePO server via VPN, it uses the VPN virtual computer's MAC address and not its own actual MAC address. This VPN MAC address is usually the same for all computers connecting through the VPN.

This issue is not restricted only to VPN clients. Anything that could cause multiple computers to report the same MAC address can cause this problem. For example, if you clone a virtual machine and do not reset the MAC address, both computers report the same MAC address to ePO

Solutions:

You need to find the MAC address of the system while it is connecting via VPN
​Go to ePO console -> System tree, find the system -> go to system information, click more, you see the VPN MAC address collected from the client.
Copy to a note the MAC Address and split the  first six digits of this MAC address, for example 012SHAY4350E.

Go to the database SQL of ePO server.

Run the following SQL command:

INSERT INTO ePOVirtualMacVendor (VendorID) values ('######')

(where: ###### is the first 6 digits of the VPN MAC address you copy already)
 
For Example:
 
INSERT INTO ePOVirtualMacVendor (VendorID) values ('012SHA')

Was test and solve in those versions:

McAfee Agent (MA) 5.x, 4.x
McAfee ePolicy Orchestrator (ePO) 5.x, 4.x
SQL Server 2005/2008/2014
0 Comments

Product deployment - invalid deployment task

9/5/2016

1 Comment

 
Problem:

Product deployment task is in status invalid.

Failed to delete product deployment task.

Error: ​The system could not delete the deployment or asscociated tasks and tags
Picture
Error: The system could not delete the deployment or associated tasks and tags
Picture
Solution:

​This problem can be solve only by delete the task from the database of ePO.

​Recommended: Backup your ePO server and database.

Log in to the database via studio management, the user should be able to run the following SQL statement, substituting in the appropriate name for the Product Deployment:

"DELETE FROM EPODeployment WHERE Name='My Project Name'"

(Replace 'My Project Name' as appropriate. Note this is destructive and cannot be reversed.)
1 Comment

Update Extra DAT

21/2/2016

1 Comment

 
EXTRA.DAT files is release when there is new and could be critical to your environment, When new malware is discovered and extra detection is required to detect and prevent against the threat.

EXTRA.DAT files contain information that is used by VirusScan and other McAfee products to detect new malware.

EXTRA.DAT file may be made available until the normal DAT update is released.

Note: EXTRA.DAT files are valid for 30 days, after which time they will become disabled.

How to update EXTRA.DAT in ePO server

Go to Menu -> Master Repository 
Click "Check in Package"
Picture
Click on Choose file and choose the EXTRA.DAT file.
Picture
Click Next and Save.

Make sure you enable the EXTRA.DAT on your update tasks.
Picture
1 Comment

login failed to epo

19/8/2015

0 Comments

 
ePO 4.x, 5.x

Problem:

Failed to Login to ePO console, receiving the following error:
"
you have provided invalid credentials

Retrieving logon message failed: a database error occurred

error: DB server key check failed"

Solution:

Restart the ePO and try to do fast login to ePO console

Update The ePO License.

-Go to Main | Configuration | Server Setting, choose License Key
-Click Edit
-Write the ePO License
-Click Save, restart the server

If you failed to login to ePO you will need to do the disaster recovery procedure.
https://kc.mcafee.com/corporate/index?page=content&id=KB66616

0 Comments

Distributed Repositories - Replication failed

12/8/2015

0 Comments

 
Problem:

Failed to connect, error 10061 (no connection could be made because the target machine actively refused it).


Solution:



Check Network blocking

check from the McAfee Agent if it can communicate with the server.

If there is no Network blocking, Uninstall the McAfee Agent, Restart the system and re-install the McAfee Agent.

Go to Manu | Distributed Repositories

Click on Replicate Now

Choose the SuperAgent you want, Click Next

Choose Replication Type, Click Next

Click Start Replication

0 Comments

McAfee Agent 4.x, 5.x environmental requirements for deploment

21/4/2015

0 Comments

 
The following environmental requirements are necessary to successfully send an agent installation from the ePO 4.x or 5.x server to a client.

You must enable all of the following on the client and the Microsoft Windows networking environment:
  • Network protocols and ports required for machine name resolution
  • ADMIN$ share
  • File and Print sharing
  • Server service
  • Remote Registry service


The credentials used for the push (from the ePO server or remote Agent Handler) must have local administrative rights on the client. Additionally, you will need to disable User Account (UAC) in Windows to successfully push an agent from ePO.


The McAfee Agent Installation does not require a restart.
0 Comments

error code 11004

9/4/2015

0 Comments

 
ePO server failed to update master repository and available version is empty

Error via http or FTP:
Failed to download file catalog.z from site update.nai.com:80, error code 11004 ( The requested name is valid, but no data of the requested type was found. )

Solution:
There is a problem with the network adapter of the ePO server.

Picture
0 Comments

McAfee Agent Deployment from GPO

29/3/2015

0 Comments

 

Download Framepkg.exe from the ePolicy Orchestrator server on a shared folder on a network
server, where all systems have read permissions.

Execute the following command:

Framepkg.exe /gengpomsi /SiteInfo=<sharedpath>\SiteList.xml /
FrmInstLogLoc=<localtempDir>\<filename>.log

The following files are extracted to your local drive.

MFEagent.msi
agentfipsmode
Sitelist.xml
sr2048pubkey.bin
srpubkey.bin
req2048seckey.bin
reqseckey.bin

Copy the extracted files to a shared UNC location specified in siteinfo path.

Create a new Group Policy Object.

Click Computer Configuration -> Policies -> Software Settings.

Right-click Software installation, then click New -> Package.

When prompted, browse to the shared UNC path, then select MFEAgent.msi.

Select the Deployment Method
0 Comments

McAfee Agent Command line

29/3/2015

0 Comments

 
McAfee Agent Option:

<Installation Path>\Common Framework\CmdAgent.exe /[P/E/C/F]

P - Collect and send properties to the server
E - Enforce policies locally
C - Check for new polices
F - Forward events to the server
S - Show agent monitor GUI
? - Help

Remove McAfee Agent:

"c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall 

or

"<Installation Path>\Common Framework\frminst.exe" /forceuninstall

0 Comments
<<Previous
    Picture
    View my profile on LinkedIn

    Categories

    All

    Best Sellers
    ePO Architecture
    ePO Upgrade Guide
    ePO Backup
    Ebates Coupons and Cash Back

    Archives

    March 2017
    August 2016
    May 2016
    February 2016
    August 2015
    April 2015
    March 2015

    Buy me a coffee:)