Loading...

Knowledge Center


How to install Endpoint Security with support for CAVA
Technical Articles ID:   KB88973
Last Modified:  8/13/2018
Rated:


Environment

McAfee Endpoint Security (ENS) Threat Prevention 10.5.1 and later, 10.2.1 and later

Dell EMC Celerra, VNXe, VNX, Unity, and VMAX eNAS and NAS platforms, Common Event Enabler (CEE) and Common AntiVirus Agent (CAVA)

NOTE: Contact Dell EMC to identify what version of ENS their CAVA supports.

Running incompatible versions of CEE and CAVA and ENS might result in unexpected problems including, but not limited to, loss of scan functionality. 

Summary

ENS 10.2.1 and ENS 10.5.1 add support for CAVA. CEE and CAVA are a framework running on a Windows platform that enables third-party antivirus engines to scan files stored on a Dell EMC Celerra, VNXe, VNX, Unity, or VMAX eNAS and NAS array. This article describes how to install ENS to work with CAVA.

To install ENS with support for CAVA, the CAVA switch is required.

Add this switch for local installations as shown below:
 
setupEP.exe ADDLOCAL="tp,fw,wc" /CAVA

For managed installations, change the McAfee Agent deployment task parameters for ENS Threat Prevention. In the Command Line field, type the following switch:
 
/CAVA
 
IMPORTANT: When you upgrade from ENS 10.2.1 with CAVA to ENS 10.5.1 with CAVA, you must run the ENS 10.5.1 installation with the CAVA switch. Without the CAVA switch, the ENS 10.5.1 installation removes CAVA from the upgraded ENS 10.2.1 system.
 
The CAVA switch disables the blocking cache in the on-access scanner (OAS), increases the number of OAS scanning threads to 200, and enables network scanning. These setting changes are needed to ensure that the OAS scans all files from CAVA.
 
By default, 200 scanning threads are made available in ENS. If this number is too many or too few for the system, you can change the value for the number of scanning threads during installation, with the following command:
 
For local installations: setupEP.exe ADDLOCAL="tp,fw,wc" /CAVA="<number of scanning threads>"
For managed installations: SetupTP.exe /CAVA="<number of scanning threads>"

Example:

For local installations: setupEP.exe ADDLOCAL="tp,fw,wc" /CAVA="100"
For managed installations use this switch in the deployment task Command Line field: /CAVA="100"
 
To change the number of scanning threads after installation:

CAUTION: This article contains information about opening or modifying the registry.
  • The following information is intended for System Administrators. Registry modifications are irreversible and could cause system failure if done incorrectly.
  • Before proceeding, Technical Support strongly recommends that you back up your registry and understand the restore process. For more information, see: http://support.microsoft.com/kb/256986.
  • Do not run a REG file that is not confirmed to be a genuine registry import file.
  1. Disable the ENS self-protection policy to allow the following registry key for scanning threads to be modified.
  2. Change the number of scanning threads:
    1. Press Windows+R, type regedit.exe, and click OK to open the Windows registry editor.
    2. Navigate to the following registry key:

      HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\AVSolution\EM\EM\dwEMThreadCount
       
    3. Change the number of scanning threads.
    4. Exit the registry editor.
       
  3. Re-enable the ENS self-protection policy.
  4. Restart the system.

Rate this document

Languages:

This article is available in the following languages:

English United States
Spanish Spain
Japanese

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.