Host Intrusion Prevention 8.0 client software fails to report to ePolicy server or enforce policy and uninstallation fails

Technical Articles ID: KB83100
Last Modified: 6/18/2019

Environment

McAfee Host Intrusion Prevention (Host IPS) 8.0

Summary

If an abnormal system shutdown occurs, a buffer overrun can occur in Windows that might cause data corruption in the registry hive for the Host IPS 8.0 Firewall.

Problem

When Host IPS 8.0 is uninstalled from the system, the registry data for Host IPS 8.0 is not removed from the system. When you try to view the registry key that was not deleted, you receive the following error message:

An error is preventing this key from being opened. Details: The system cannot find the file specified.

Problem

The following errors are recorded in the McAfee Agent log:

I #3556 Manage CollectProperties through LPC interface for software HOSTIPS_8000
I #3556 MsgQueue Posting message to message queue
I #3556 Manage CEnforceProperties::collecPropertiesThroughIpc - collectProperties function call failed

The following errors are recorded in the Host IPS 8.0 HipMgtPlugin.log:

ERROR (3984) getFirewallPolicyData() - failed to enum the firewall rule registry keys.
ERROR (3984) getFirewallPolicyData() - failed to read the firewall policy aggr match data. Firewall policy data processing will be aborted.
ERROR (3984) getFirewallPolicyData() - failed to successfully read the firewall rules.
ERROR (3984) GetProperties() - failed to load firewall policy data.
ERROR GetProperties returning 0

Cause

The system has a corrupted registry.

Solution

This issue is resolved in Host IPS 8.0 Patch 9 Hotfix 1164019. For details, see the Host Intrusion Prevention for Windows 8.0.0 Patch 9 Hotfix 1164019 Release Notes (PD27047).

Updates are available when you log on to the ServicePortal.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Affected Products

Host Intrusion Prevention 8.0
Install/Uninstall
Known Issue/Product Defect

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

Knowledge Center

Host Intrusion Prevention 8.0 client software fails to report to ePolicy server or enforce policy and uninstallation fails

Environment

Summary

Problem

Problem

Cause

Solution

Affected Products

Glossary of Technical Terms

Title

Title

Knowledge Center

Host Intrusion Prevention 8.0 client software fails to report to ePolicy server or enforce policy and uninstallation fails

Environment

Summary

Problem

Problem

Cause

Solution

Affected Products

Glossary of Technical Terms

Choose your region

Title

Title