Knowledge Center


Removing Host Intrusion Prevention 8.0 from a server running IIS 7.0 does not remove the ISAPI references
Technical Articles ID:   KB72677
Last Modified:  2/27/2017
Rated:


Environment

McAfee Host Intrusion Prevention (Host IPS) 8.0

Microsoft Windows Server 2008 with IIS 7.0

Problem

If you remove Host IPS 8.0 from a server running Microsoft Windows Server 2008 with IIS 7.0, the ISAPI filter references are not removed from the IIS applicationHost.config file.

Solution

{GENAB.EN_US}
{GENAA.EN_US}

Workaround

Edit the IIS 7.0 applicationHost.config file and remove the following ISAPI filter configuration lines:
  1. Press Windows+R, type explorer, and click OK.
  2. Navigate to: %windir%\system32\inetsrv\config
  3. Open the file applicationHost.config as Administrator for editing in Notepad.
  4. Edit the <globalModules> section and remove the following line:

    <add name="MfeEngine" image="%windir%\System32\inetsrv\HipIISEngineStub.dll" />
     
  5. Edit the <modules> section and remove the following line:

    <add name="MfeEngine" />
     
  6. Save the file.
  7. Restart the IIS server using the command iisreset or by restarting the system.

Rate this document

Did this article resolve your issue?

Please provide any comments below

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.