Host Intrusion Prevention 8.0 Patch 4 Known Issues
技术文章 ID:
KB78494
上次修改时间: 4/7/2017
上次修改时间: 4/7/2017
环境
McAfee Host Intrusion Prevention (Host IPS) 8.0 Patch 4
摘要
This article contains important information about known issues of high or medium rating that are outstanding with this product release. This article will be updated if new issues are identified post-release, or if additional information becomes available. To read the Release Notes, see:PD25043.
Release to Support (RTS): January 20, 2014
Release to World (RTW): February 19, 2014
For more information on release cycles, see KB51560.
Known Issues
CRITICAL: There are no critical issues at this time.
Non-critical:
| Reference Number | Related Article | Issue Description |
| Issue: Documentation Correction: Host IPS 8.0 Patch 4 documentation does not mention support for ePO 5.1, only ePO 5.0 and earlier. Resolution: Host IPS 8.0 Patch 4 is supported with ePO 5.1. |
||
| KB70778 | Issue: Documentation Correction: Host IPS 8.0 Patch 4 documentation does not mention support for Windows 8, Update 1. Resolution: Host IPS 8.0 Patch 4 is fully supported on Windows 8, Update 1. NOTE: Windows 8.1 requires a McAfee Agent version of 4.8 Patch 1 to be supported. |
|
| 978907 | KB82610 | Issue: The Host IPS 8.0 ClientControl utility returns invalid certificate signer details. Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 976322 | KB82604 | Issue: You are unable to load Host IPS 8.0 Patch 4 extension console because of locked threads on Property Translator. Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 975952 | KB82576 | Issue: The Host IPS installer does not remove the firehk.sys registry entries when upgrading from HIPS 7.0 Patch 9 to HIPS 8.0 Patch 4. Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 972751 | KB82595 |
Issue: There is an intermittent application crash of McTray.exe listing RPCRT4.dll as the faulting module.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 969872 | KB81978 |
Issue: Microsoft Office or Adobe Reader application faults occur on systems running Host IPS 8.0 Patch 4.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 961406 | KB81912 | Issue: The shutdown sequence with MA 4.8 Patch 2 and HIPS 8.0 Patch 4 LPC service takes longer than the previous MA version. NOTE: This issue is expected to be resolved in MA 4.8 Patch 3, or MA 5.0. |
| 953129 | KB82609 | Issue: You cannot create custom IPS signatures with an EXCLUDE and INCLUDE statement in the Subrule. Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 951746 | KB77567 | Issue: All ePO Threat Notification automatic responses stop working when you enable a Host Intrusion Prevention 8.0 Automatic Response. Resolution: This issue is currently being investigated by Engineering. |
| 947357 | KB81286 | Issue: The expiration date and time are overwritten, causing a previously issued time-based password to be invalid, even when not expired. Resolution: Patch 4 plus Hotfix 917046 (for both the client and extension) corrects this issue and is currently available on the Support ServicePortal. This issue is resolved in Host IPS 8.0 Patch 5, which was released in Q2 2015. |
| 943981 | KB81990 |
Issue: A printer fails to mount with the Host IPS 8.0 firewall module enabled.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 940706 | KB82608 | Issue: The Host IPS 8.0 signature content version is not reported correctly in ePO. Resolution: This issue is currently being investigated by Engineering. |
| 939770 | KB82025 |
Issue: Citrix XenApp 6.5, vDisk fails to boot causing a blue screen error when it is streamed.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 934224 | KB82137 | Issue: Host IPS 8.0 Signature events: Mapped drive file references showing odd path values. NOTE: See the Knowledge Base article for a workaround. This issue has been deferred and is being evaluated for consideration in a future release or patched version of the product. |
| 930346 | KB82024 |
Issue: Firewall rule Popup Alert, Intrusion Notifications, display only when logged in with the Administrator account.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 929449 | KB82597 | Issue: The Host IPS 8.0 Firewall policy is not enforced correctly. Resolution: This issue is currently being investigated by Engineering. |
| 927716 | KB81779 |
Issue: Systems with the Intel® Ethernet Connection I128-LM network adapter lose network connectivity after resuming from a sleep or hibernate state.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 917969 | KB81968 |
Issue: A memory leak exists in the sqlserver.exe process with the Host IPS 8.0 SQL engine.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 917594 | KB82342 | Issue: Exceeding the character limit for a Host IPS 8.0 custom signature Subrule deletes the Subrule parameters. Resolution: This issue is currently being investigated by Engineering. |
| 913276 | KB82663 |
Issue: Multicast traffic is blocked by Host IPS 8.0 on Windows 8 systems when a firewall rule allowing the traffic is within the LAG.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 906024 | KB82520 |
Issue: You are unable to create an IPS exception using the group name parameter.
Resolution:
This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 878858 | KB82599 | Issue: You are unable to import the Host IPS policy.xml on Host IPS 8.0 Patch 4 and 8.0 Patch 3 Extension versions because of a signature name with a tab delimiter. Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 833521 | KB81154 |
Issue: On 32-bit systems, if the maximum event log file size is very high, rollover of the event log fails.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
952227 |
PD25488 |
Issue: If the number of signatures disabled by the customer is very high, HIPS sends an asterisk (*) in the Disabled Signatures Counter Measure property.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
973841 |
PD25488 |
Issue: BSOD BugCheck 135 on HipShieldK.sys.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
911374 |
PD25488 |
Issue: Bugcheck D6 is seen, when IPS is enabled.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
963044 |
PD25488 |
Issue: Host IPS false positive with signature 6014 (“Suspicious Function Invocation - Return Address Not Readable”) when launching applications that are Large Address Aware on 64-bit platforms.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
1005841 |
PD25488 |
Issue: Agent wakeup calls fail to client machines running Host IPS if the McAfee ePO server is configured to use a TCP port greater than 32,767.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
923579 |
PD25488 |
Issue: When triggered by a user belonging to many (>20) groups in Active Directory, IPS events are missing advanced details.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
927324 |
PD25488 |
Issue: Services.exe crashes on 64-bit systems when Quest ChangeAuditor is installed.
Resolution: This issue is resolved in Host IPS 8.0 Update 5, which is available when you log on to the ServicePortal at: https://support.mcafee.com/downloads.
This issue is also resolved in Patch 4 Hotfix 952227 for Host Intrusion Prevention 8.0. See PD25488 for HotFix 952227 Release Notes. HF952227 is currently available for download by logging in to the ServicePortal at http://support.mcafee.com.Updates are cumulative; Technical Support recommends that you install the latest one. To review the Release Notes, see Host IPS 8.0 Patch 5. To review Known Issues, see KB81392. |
| 1035986 | KB83836 |
Issue: Unable to deploy Host IPS 8.0 Patch 4 (build 2919) using MA 5.0 on SUSE 11.3.
Resolution: This issue is currently being investigated by Engineering. |
| 1025475 | KB83782 | Issue: Booking Builder application for Sabre reservations tool fails to display data tab. Resolution: RCA not determined (third-party application). See the related article for the suggested Host IPS configuration. |
