Problem:

Superagent stop updating.
Error: Failed to upload file SiteStat.xml to site Servername.domain.com:8026, error code 5 ( Access is denied. )

Solution:

Make sure which user run the McAfee Agent Services

Give full permission to the user that run the services of the McAfee agent to the following folders:
1. On the folder that hold the McAfee Update,(Configure via policy) 
2. On the Folder: 
C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

Make sure which folder you configure for the superagent update folder

​

Problem:

One of these problems occurred:

- System disappearing from ePO
- System re registering in ePO
- System reappear in Lost&found

one of the scenarios is happening while the systems are connection via VPN. 

What is happening:

You encounter this problem only when the first connection from a client to the ePO server takes place over a VPN connection. If the computer's first connection is via a Local Area Network (LAN), the correct Media Access Control (MAC) address is added to the table.
 
When a computer communicates with the ePO server via VPN, it uses the VPN virtual computer's MAC address and not its own actual MAC address. This VPN MAC address is usually the same for all computers connecting through the VPN.

This issue is not restricted only to VPN clients. Anything that could cause multiple computers to report the same MAC address can cause this problem. For example, if you clone a virtual machine and do not reset the MAC address, both computers report the same MAC address to ePO

Solutions:

You need to find the MAC address of the system while it is connecting via VPN
​Go to ePO console -> System tree, find the system -> go to system information, click more, you see the VPN MAC address collected from the client.
Copy to a note the MAC Address and split the  first six digits of this MAC address, for example 012SHAY4350E.

Go to the database SQL of ePO server.

Run the following SQL command:

INSERT INTO ePOVirtualMacVendor (VendorID) values ('######')

(where: ###### is the first 6 digits of the VPN MAC address you copy already)
 
For Example:
 
INSERT INTO ePOVirtualMacVendor (VendorID) values ('012SHA')

Was test and solve in those versions:

McAfee Agent (MA) 5.x, 4.x
McAfee ePolicy Orchestrator (ePO) 5.x, 4.x
SQL Server 2005/2008/2014

Problem:

Product deployment task is in status invalid.

Failed to delete product deployment task.

Error: ​The system could not delete the deployment or asscociated tasks and tags

Error: The system could not delete the deployment or associated tasks and tags

Solution:

​This problem can be solve only by delete the task from the database of ePO.

​Recommended: Backup your ePO server and database.

Log in to the database via studio management, the user should be able to run the following SQL statement, substituting in the appropriate name for the Product Deployment:

"DELETE FROM EPODeployment WHERE Name='My Project Name'"

(Replace 'My Project Name' as appropriate. Note this is destructive and cannot be reversed.)

EXTRA.DAT files is release when there is new and could be critical to your environment, When new malware is discovered and extra detection is required to detect and prevent against the threat.

EXTRA.DAT files contain information that is used by VirusScan and other McAfee products to detect new malware.

EXTRA.DAT file may be made available until the normal DAT update is released.

Note: EXTRA.DAT files are valid for 30 days, after which time they will become disabled.

How to update EXTRA.DAT in ePO server

Go to Menu -> Master Repository 
Click "Check in Package"

Click on Choose file and choose the EXTRA.DAT file.

Click Next and Save.

Make sure you enable the EXTRA.DAT on your update tasks.

ePO 4.x, 5.x

Problem:

Failed to Login to ePO console, receiving the following error:
"
you have provided invalid credentials

Retrieving logon message failed: a database error occurred

error: DB server key check failed"

Solution:

Restart the ePO and try to do fast login to ePO console

Update The ePO License.

-Go to Main | Configuration | Server Setting, choose License Key
-Click Edit
-Write the ePO License
-Click Save, restart the server

If you failed to login to ePO you will need to do the disaster recovery procedure.
https://kc.mcafee.com/corporate/index?page=content&id=KB66616

Problem:

Failed to connect, error 10061 (no connection could be made because the target machine actively refused it).


Solution:



Check Network blocking

check from the McAfee Agent if it can communicate with the server.

If there is no Network blocking, Uninstall the McAfee Agent, Restart the system and re-install the McAfee Agent.

Go to Manu | Distributed Repositories

Click on Replicate Now

Choose the SuperAgent you want, Click Next

Choose Replication Type, Click Next

Click Start Replication

ePO server failed to update master repository and available version is empty

Error via http or FTP:
Failed to download file catalog.z from site update.nai.com:80, error code 11004 ( The requested name is valid, but no data of the requested type was found. )

Solution:
There is a problem with the network adapter of the ePO server.

Download Framepkg.exe from the ePolicy Orchestrator server on a shared folder on a network
server, where all systems have read permissions.

Execute the following command:

Framepkg.exe /gengpomsi /SiteInfo=<sharedpath>\SiteList.xml /
FrmInstLogLoc=<localtempDir>\<filename>.log

The following files are extracted to your local drive.

MFEagent.msi
agentfipsmode
Sitelist.xml
sr2048pubkey.bin
srpubkey.bin
req2048seckey.bin
reqseckey.bin

Copy the extracted files to a shared UNC location specified in siteinfo path.

Create a new Group Policy Object.

Click Computer Configuration -> Policies -> Software Settings.

Right-click Software installation, then click New -> Package.

When prompted, browse to the shared UNC path, then select MFEAgent.msi.

Select the Deployment Method

McAfee Agent Option:

<Installation Path>\Common Framework\CmdAgent.exe /[P/E/C/F]

P - Collect and send properties to the server
E - Enforce policies locally
C - Check for new polices
F - Forward events to the server
S - Show agent monitor GUI
? - Help

Remove McAfee Agent:

"c:\Program Files\Network Associates\Common Framework\frminst.exe" /forceuninstall 

or

"<Installation Path>\Common Framework\frminst.exe" /forceuninstall