Loading...

Knowledge Center


How to list all computers that have a specific VirusScan Enterprise or Host IPS hotfix installed
Technical Articles ID:   KB67406
Last Modified:  6/22/2016
Rated:


Environment

McAfee VirusScan Enterprise (VSE) 8.x
McAfee Host IPS (HIP) 8.0
McAfee ePolicy Orchestrator (ePO) 5.x
Microsoft SQL Server 2005
Microsoft SQL Server 2000

Summary

Use the steps in this article to create a custom SQL query to list all of the computers where a specific VSE or HIP hotfix (not a patch) was installed.

Solution

Hotfix reporting was changed in VSE 8.8 patch 4 and later to make this information easier to find.

Issue resolutions in patches and major releases are cumulative; therefore, Intel Security recommends that you install the latest version. To find the most recent release for your product, visit the Product Downloads site at http://www.mcafee.com/us/downloads/downloads.aspx.

Patches are available by logging in to the ServicePortal at: https://support.mcafee.com/downloads

Solution

For systems with VSE 8.8 Patch 3 (and earlier):

Manually verify whether a specific hotfix has been applied:
  1. Open the Microsoft SQL Server Management Studio or Microsoft SQL Query Analyzer. For detailed instructions about opening the Microsoft SQL query analyzer or the Microsoft SQL Server Management Studio and running queries, see KB56430.

    NOTE: Ensure the query is run against the ePO database.
     
  2. Copy and paste the following Microsoft SQL, and then run it on the Microsoft Query Analyzer or Microsoft SQL Server Management Studio.

    select ln.nodename as Hostname, pp.productversion as Version, pp.hotfix as Patch, ps.value as Hotfix from epoleafnode ln join epoproductproperties pp on ln.autoid = pp.parentid join epoproductsettings ps on pp.autoid = ps.parentid where ps.settingname = 'Fixes' and ps.value like '%517265%'
    order by hostname


    NOTE: This SQL query lists all computers where hotfix (HF517265) was installed. If you need to specify a different hotfix, replace 517265 with the relevant hotfix number.

Manually verify all of the hotfixes that have been applied:
  1. Open the Microsoft SQL Server Management Studio or Microsoft SQL Query Analyzer. For detailed instructions about opening the Microsoft SQL query analyzer or the Microsoft SQL Server Management Studio and running queries, see KB56430.

    NOTE: Ensure the query is run against the ePO database.
     
  2. Copy and paste the following Microsoft SQL, and then run it on the Microsoft Query Analyzer or Microsoft SQL Server Management Studio.

    select ln.nodename as Hostname, pp.productversion as Version, pp.hotfix as Patch, ps.value as Hotfix from epoleafnode ln join epoproductproperties pp on ln.autoid = pp.parentid join epoproductsettings ps on pp.autoid = ps.parentid where ps.settingname = 'Fixes'  order by hostname

    NOTE: This SQL query lists all computers and all VSE and HIP hotfixes that have been applied.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.