Loading...

Knowledge Center


Unexpected error (when loading the Adaptive Threat Protection Events page in ePolicy Orchestrator)
Technical Articles ID:   KB90144
Last Modified:  1/30/2018

Environment

McAfee Endpoint Security (ENS) Adaptive Threat Protection (ATP) 10.5.3 ePO Extension

Problem

After upgrading the ENS ATP Extension to version 10.5.3, an Unexpected error might display when you access the Adaptive Threat Protection Events page in ePolicy Orchestrator (ePO).

The following is an example of the error message that is recorded in the ePO Orion log:
 
2017-12-12 10:38:05,978 DEBUG [http-nio-8443-exec-14] servlet.ControllerServlet  - Validating action: handleUncaughtThrowable.do
2017-12-12 10:38:05,978 DEBUG [http-nio-8443-exec-14] servlet.ControllerServlet  - Executing action: handleUncaughtThrowable.do
2017-12-12 10:38:05,978 DEBUG [http-nio-8443-exec-14] error.UncaughtThrowableHandler  - An uncaught exception occurred
error message: The absolute uri: http://www.mcafee.com/orion/console cannot be resolved in either web.xml or the jar files deployed with this application
web application url that resulted in the error :/core/orionTab.do
servlet name that resulted in the error: core
username of user who submitted the request: e134628
ID of user who submitted the request: 6

Solution

This issue is resolved in ePO 5.9.1, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.

Workaround

Apply the following workaround on the affected ePO server, to correct the issue with the web.xml file:
  1. Stop the ENS ATP Extension:
     
    https://<ePO server>:<port>/remote/core.shutdown-plugin.do?name=JTIClientMETA
     
  2. Rename \Server\extensions\installed\JTIClienMETA\10.5.3.3044\webapp\WEB-INF\web.xml to web.xml.bad.
  3. Rename \Server\extensions\installed\JTIClienMETA\10.5.3.3044\webapp\WEB-INF\web.xml.unmodified to web.xml.
  4. Start the ENS ATP Extension:
     
    https://<ePO server>:<port>/remote/core.reload-plugin.do?name=JTIClientMETA
     
  5. Open the Adaptive Threat Protection Events page.
NOTE: If you restart the ePO application server service (Tomcat), it might revert this workaround. If a revertal happens, you need to apply the workaround again.

Rate this document

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.