VSEL can be managed through ePolicy Orchestrator (ePO) or directly on the endpoint.
The following steps detail how to upgrade VSEL endpoints to the latest Scan Engine using ePO:
- Log on to the ePO console as Administrator.
- Check the latest Scan Engine ePO package into the evaluation branch, along with the latest DAT release.
You can download the latest Scan Engine and DAT packages at: http://www.mcafee.com/apps/downloads/security-updates/security-updates.aspx.
- Create a sub-group in the ePO system tree for the VSEL machines you plan to upgrade.
- Move all the VSEL machines you want to upgrade to the sub-group you created.
- Create a new agent General Policy for that sub-group. Change that policy's settings on the Update tab to pick up the DAT and Linux Engine updates in the evaluation branch.
- Create an agent update task for that group to update the Engine and DATs.
- Send an agent wakeup call to the sub-group so that the policy and tasks are deployed to the VSEL machines.
Within a few minutes, your endpoints should show the new Scan Engine installed.
Manual Scan Engine update process:
- Download epo5x00lnx.zip (where x is the Scan Engine version) from http://www.mcafee.com/apps/downloads/security-updates.aspx?region=us and copy it to the /tmp of the Linux system.
- On the Linux system, change directory to /tmp and execute epo5x00lnx.zip.
This extracts the following files:
avengine64.zip
avengine.zip
PkgCatalog.z
V2engdet.mcs
V2enginstall.mcs
- Unzip the appropriate files for your Linux system:
Use avengine.zip for all systems running VSEL 1.9 and earlier, and 32-bit systems running VSEL 2.0 and later.
Use avengine64.zip for 64-bit systems running VSEL 2.0 and later.
This extracts the following files:
config.dat
liblnxfv.so.4
license.txt
readme.txt
signlic.txt
- Stop the Nails service.
- Move to the directory /opt/NAI/LinuxShield/engine/lib/ and execute the following command to delete the existing Scan Engine files:
rm -rf config.dat liblnxfv.so signlic.txt
- Move to the directory /tmp and run the following commands:
cp config.dat /opt/NAI/LinuxShield/engine/lib/config.dat
cp liblnx.so.4 /opt/NAI/LinuxShield/engine/lib/liblnx.so.4
cp signlic.txt /opt/NAI/LinuxShield/engine/lib/signlic.txt
- Start the nails service and access the VSEL GUI to verify the Scan Engine version.
The new Scan Engine version should now show as installed.
