How to remove and reinstall the Rogue System Detection 5.x extension
Technical Articles ID:
KB75700
Last Modified: 2/9/2021
Environment
McAfee Rogue System Detection (RSD) 5.x
Problem
Your RSD 5.x extension on the ePO server has become corrupt.
Solution
To resolve this issue:
- IMPORTANT: Before you begin the process explained in this article, you must back up your ePO server. See the following KB articles for more information:
-
Back up the RSD server settings:
- Log on to the ePO console.
- Click Menu, Configuration, Server Settings.
- Make a note of any custom configuration in the following categories:
- Detected System Compliance
- Detected System Exception Categories
- Detected System Matching
- Detected System OUIs
- Rogue System Sensor
-
Export the RSD exceptions:
- In the ePO console, click Menu, Systems, Detected Systems.
- Click Import/Export Exceptions under the Overall System Status dashboard header.
- Click the Export Exceptions tab, then click here to download exceptions entry.
- Click Save and save the exceptions.
NOTE: If you export Exceptions, it does not export Exception Categories. You must manually re-create them after you reinstall the RSD extension.
-
Export the blacklist:
- In the ePO console, click Menu, Systems, Detected Systems.
- Click View Blacklist under the Rogue System Sensor Status dashboard header.
- Click Actions, Rogue Sensor, Export Blacklist.
- Click Save.
-
Export the RSD policies:
- In the ePO console, click System Tree.
- Click the Assigned Policies tab.
- Click Actions, Export All Assignments.
- Right-click the PolicyAssignmentExport entry, click Save Link As, and save the (.XML) file.
- Remove the existing extension:
- Log on to the ePO console.
- Click Menu, Software, Extensions.
- Click ePolicy Orchestrator under the Extensions section.
- Locate the Rogue System Detection extension in the right pane.
- Click Remove and confirm removal of the extension.
- Check in the new RSD extension:
- In the ePO console, click Menu, Software, Extensions.
- Click Install Extension.
- Click Browse and navigate to <ePO installation directory>\Installer\ePO\extensions.
- Click the rsd.zip file.
- Click OK. Completes the installation of the extension.
- Import the exceptions:
- In the ePO console, click Menu, Systems, Detected Systems.
- Click Import/Export Exceptions under the Overall System Status dashboard header.
- Select By File and browse to previously exported exceptions.
- Click Import Exceptions.
- Import the blacklist:
- In the ePO console, click Menu, Systems, Detected Systems.
- Click View Blacklist under the Rogue System Sensor Status page.
- Click Actions, Rogue Sensor, Import Blacklist.
- Select Import file with list of systems to add to the Sensor Blacklist.
- Navigate to the previously exported list.
- Click Import.
- Import the policies and assignments:
- In the ePO console, click System Tree.
- Click the Assigned Policies tab.
- Click Actions, Import Assignments.
- Click Browse, navigate to previously exported policy assignments, and click Next.
- To deselect all Policies, deselect the option to the left of the Product column
- Select only Rogue System Detection 4.6.0 policies for import and click Next.
- To deselect all Policy Assignments, deselect the option to the left of the Product column
- Select only Rogue System Detection policy assignments and click Save.
NOTE: If no other policy changes have been made, you can import all policies and assignments safely.
|
