Hotfix 1205305 (EPO_FIPS_HF1205305) and Hotfix 1216989 (EPO_FIPS_HF1216989) for ePolicy Orchestrator (ePO) in FIPS Mode are now available.

The hotfixes include an update to the Open SSL library to operate in a mode that is recommended for use in FIPS environments. Both hotfixes contain the same fix, but apply to different versions of ePO:

NOTE: These hotfixes are applicable only to ePO servers or agent handlers installed in FIPS mode.

• If you are on ePO versions 5.9.0, 5.3.3, 5.3.2, 5.3.1 or 5.1.3, apply Hotfix 1205305. For Release Notes, see: https://kc.mcafee.com/corporate/index?page=content&id=PD27345
• If you are on ePO versions 5.3.0, 5.1.2, 5.1.1, 5.1.0 or 4.6.9, apply Hotfix 1216989. For Release Notes, see: https://kc.mcafee.com/corporate/index?page=content&id=PD27346

See KB90038 for additional details: https://kc.mcafee.com/corporate/index?page=content&id=KB90038

To download Hotfix 1205305 or Hotfix 1216989, go to the Product Downloads site at:
http://www.mcafee.com/us/downloads/downloads.aspx 

McAfee Application Control and Change 6.1.7.716 for Linux is now available. This release includes the following enhancements:

• Support for Linux kernel updates:
  •  UEK Oracle 6 kernel 3.8.13-118.16.4.el6uek.x86_64
  •  LEL7 for kernel 3.10.0-693.5.2.el7.x86_64.
  •  LUBT14 with kernel 4.4.0-83-generic. 
  •  LEL6 with kernels 2.6.32-696.10.3.el6 and 2.6.32-696.13.2.el6. 
  •  LSES11 and LSED11 with kernel 3.0.101-108.10-default.

And also resolves the following issues:

• The execution of chmod is blocked when configured as updater. 
• System crashes when Application Control is enabled.

To download MACC 6.1.7.716, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx   
For a full list of changes, see the Release Notes in PD27342: https://kc.mcafee.com/corporate/index?page=content&id=PD27342 
For a list of Known Issues, see KB84332: https://kc.mcafee.com/corporate/index?page=content&id=KB84332

McAfee Endpoint Security for Mac 10.2.3 Hotfix 1213993 is now available.

This release includes the following bug fixes and enhancements:

• It is now possible to block incoming connections in the local subnet.
• The default view - only firewall rules, defined in McAfee ePO policy, are now ignored by Endpoint Security for Mac Firewall.
• The “McAfee Agent Communication” rule group, which contains the dynamically generated firewall rules for business continuity, is renamed to “McAfee Core Networking.”
• By default, a new dynamic rule (Allow Loopback Rule) is now generated under the McAfee Core Networking rule group. This is applicable to both managed and unmanaged nodes.

You can download Endpoint Security for Mac 10.2.3 Hotfix 1213993 from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.

​

McAfee Active Response Hotfix 2.1.0.272 Hotfix 3 is now available.
This hotfix includes the following fixes:
 

• MAR uses the data from the Processes collector to obtain the process tree to kill. The Stop and Remove execution fallback, in case of Trace failure, has been fixed.
• Trigger events via cmd line that are bigger than 2048 chars are now truncated and shown in the McAfee ePO table.
• The MAR extension “mar-server” now uses TLS 1.2 and TLS handshake connections between extensions are no longer failing.
• Improvements on threads and signals handling now avoids high CPU usage on certain conditions

Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx

For more information, see the Release Notes in PD27339:
https://kc.mcafee.com/corporate/index?page=content&id=PD27339
​

​McAfee Active Response 2.2.0 is now available. This release includes new features, fixes, and enhancements including:

Additional operating system support:

• Microsoft Windows 10 (version 1709) - Fall Creators Update (Redstone 3 [RS3])
• Apple macOS –  High Sierra (10.13), Sierra (10.12), and El Capitan (10.11)
• Linux -  64-bit architecture (32-bit architecture is no longer supported)

Cloud Storage and services Improvements:

• Improved registration for McAfee Active Response cloud account
• Additional cloud storage regions
• Multi-tenant ePO configuration

Health Status and Threat Workspace improvements

• Additional status alerts

Collectors and Triggers support sha256

You can download McAfee Active Response 2.2.0 using the ePO Software Manager, or from the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx. 

For a full list of changes, see the Release Notes in PD27282:
https://kc.mcafee.com/corporate/index?page=content&id=PD27282.

IMPORTANT: McAfee Windows 10 compatibility with McAfee products is available is available for download.

McAfee has made the following versions available to support Microsoft Windows 10 Fall Creators Update (ver 1709) -
 

• Data Exchange Layer 4.0 Release Notes
  https://kb.mcafee.com/corporate/index?page=content&id=PD27304
• Data Loss Prevention Endpoint 10.0.330 Release Notes
  https://kc.mcafee.com/corporate/index?page=content&id=PD27310

• Data Loss Prevention Endpoint 11.0.130 Release Notes
  https://kb.mcafee.com/corporate/index?page=content&id=PD27309
• Drive Encryption 7.2.2  Release Notes
  https://kb.mcafee.com/corporate/index?page=content&id=PD27239
• Endpoint Security 10.2.2 Release Notes
  https://kc.mcafee.com/corporate/index?page=content&id=PD27193

• Endpoint Security 10.5.3 Release Notes: 

https://kc.mcafee.com/corporate/index?page=content&id=PD27192

• Endpoint Upgrade Assistant 1.5 Release Notes:
  https://kb.mcafee.com/corporate/index?page=content&id=PD27302
• File and Removable Media Protection 5.0.4 Release Notes:
  https://kb.mcafee.com/corporate/index?page=content&id=PD27241
• Host Intrusion Prevention 8.0 Patch 10 Release Notes:
  https://kc.mcafee.com/corporate/index?page=content&id=PD27204
• Management of Native Encryption 4.1.2 Release Notes:
  https://kb.mcafee.com/corporate/index?page=content&id=PD27240
• McAfee Active Response 2.2 Release Notes:

https://kc.mcafee.com/corporate/index?page=content&id=PD27282
 

• McAfee Client Proxy 2.3.2.213 Release Notes
  https://kb.mcafee.com/corporate/index?page=content&id=PD27318
• McAfee VirusScan Enterprise 8.8 Patch 10 Release Notes
  https://kc.mcafee.com/corporate/index?page=content&id=PD27206

 
   
NOTE: McAfee Agent 5.0.5, 5.0.6 and 4.8 Patch 3 already support this Windows 10 update.
To download these product versions, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx
For more details on Windows 10 Updates and McAfee Product compatibility, please refer to https://kc.mcafee.com/corporate/index?page=content&id=KB85784

A new Database Vulnerability Manager content update v147 has been released.
This update includes:

• New configuration checks for MSSQL databases
• New configuration checks for Oracle databases
• ORACPU checks improvement
• New check for MSSQL databases to detect latest missing patch
• Updated check for Sybase databases to detect latest missing patch
• New checks for DB2 and MSSQL databases to detect recently reported vulnerabilities
  • The following CVEs are covered for DB2: CVE-2017-1105, CVE-2017-1297, CVE-2017-1438, CVE-2017-1439, CVE-2017-1520, CVE-2017-1451, CVE-2017-1452
  • The following CVE is covered for MSSQL: CVE-2012-2552

The content update is cumulative and available within the product, either via automatic updates, or by manual action.

Performance Optimizer 2.2.0 Update 1 is now available. This release includes new features, fixes, and enhancements including:

• Server settings and ARS action JSPs fail to compile in unknown/intermittent scenario with ePO 5.3.3:

McAfee Engineering is still investigating the root cause for the JSP compilation problems. In this new version of the extension, a workaround has been implemented that allows for the affected JSP pages to compile successfully. See https://kc.mcafee.com/corporate/index?page=content&id=KB89968 for more information.

• Collation error occurs during install when the ePO database collation does not match server collation:

In this new version a workaround has been implemented to allow for mismatched collations between the SQL Server instance and the ePO database. For more information on supported collations see:  https://kc.mcafee.com/corporate/index?page=content&id=KB73717
https://kc.mcafee.com/corporate/index?page=content&id=KB89982

• Drill down for assessment "Server Tasks - Length of run time" displays error "DBO setter setDuration threw exception":

If the assessment of server task durations was done while a task was in progress it would cause a null value to be recorded. See https://kc.mcafee.com/corporate/index?page=content&id=KB84888 for more information. (Note that this article is registered; you must be logged in to view it.)

• MER task timeout should be doubled:

While verifying the new version of Performance Optimizer 2.2.0 it was noticed that the MER task timeout should be increased. In a future release this timeout value will be configurable in the server settings.
To download [Performance Optimizer 2.2.0 Update 1, go to the Product Downloads site at: http://www.mcafee.com/us/downloads/downloads.aspx.  
For a full list of changes, see the Release Notes in KB89993: https://kc.mcafee.com/corporate/index?page=content&id=KB89993.