Effective June 30, 2019, the service provider that McAfee used to host our FTP service no longer provides FTP capabilities. McAfee uses HTTP sites to update content for McAfee products because it is the most modern communication capability available.
Follow the steps below to make any needed changes in ePO for managed mode or McAfee Agent for unmanaged mode.
Contents:
Click to expand the section you want to view:
These instructions are applicable when using ePO managed mode.
To make sure that either the McAfeeHttp site or a custom source site is listed:
Select Menu, Configuration, Server Settings.
Select Source Sites to display a list of source sites. The default source site is named McAfeeHttp and the Server URL is update.nai.com/Products/CommonUpdater. If it is not listed, perform the following steps to add the default source site.
To add the default source site:
Select Menu, Configuration, Server Settings.
Select Source Sites.
Click Add Source Site. The Source Site Builder wizard displays.
On the Description page, type a unique repository name, select HTTP, and then click Next.
On the Server page, select DNS Name from the drop-down list and provide the web address update.nai.com/Products/CommonUpdater in the space provided, and then click Next.
NOTE: The correct port number is 80.
On the Credentials page, make sure that Anonymous is selected, click Test Credentials, and then click Next.
Review the Summary page, and then click Save to add the site to the list.
To remove the FTP source site (and reflect the McAfee Agent repository policy):
Select Menu, Configuration, Server Settings.
Select Source Sites, and then click Edit. The Edit Source Sites page displays.
Click Delete next to the McAfeeFTP or ftp.nai.com/CommonUpdater site. The Delete Source Site dialog box displays.
Click OK. The site is removed from the Source Sites page.
To change the fallback site:
Select Menu, Configuration, Server Settings.
Select Source Sites, and then click Edit. The Edit Source Sites page displays.
Click Enable Fallback next to the HTTP site you want to use as the fallback site.
NOTE: If the option says Disable Fallback, it is already the fallback site. You can have only one fallback site defined.
Click Save.
To change the site that a Master Repository pull task in ePO pulls from:
Select Menu, Automation, Server Tasks.
Click Edit next to the repository pull task you want to modify.
Click Next.
Select an HTTP source site in the Source Site drop-down list.
NOTE: If you have no HTTP source site listed, follow the instructions to add one.
Click Save.
The following error message is logged in the ePO Server log file after the FTP site (ftp.nai.com) became unavailable after June 30, 2019. From the ...\<ePO installation directory>\db\logs\ePOApSrv.log:
E #04172 NAINET FTPConnection.cpp(531): FTP session 4 failed to find host for FTP server: ftp.nai.com:21, error 11001
These instructions are applicable when McAfee Agent is pulling content directly from the McAfee repository without ePO.
To go to the relevant product instructions, click the appropriate link below:
From the Endpoint Security console:
Before you begin, set the interface mode for the Endpoint Security client to Full access or log on as administrator:
Open the Endpoint Security client.
From the Action menu, select Settings.
Click Show Advanced.
From Common, click Options.
Under Source Sites for Updates settings:
Enable NAIHttp if it is disabled.
Disable NAIFtp if it is enabled.
Click Apply to save your changes.
From the VirusScan Enterprise console:
Open the McAfee VirusScan Enterprise console.
From the Tools menu, select Edit AutoUpdate Repository List.
Enable NAIHttp if it is disabled.
Disable NAIFtp if it is enabled.
Click OK.
The following error messages are logged for Endpoint Security and VirusScan Enterprise in the McAfee Agent log file after the FTP site (ftp.nai.com) became unavailable after June 30, 2019. From the %ALLUSERSPROFILE%\McAfee\Agent\logs\McScript.log:
I #5880 network URL(ftp://ftp.nai.com:21/CommonUpdater/SiteStat.xml) request, failed with curl error 6, Response 0, Connect code 0,
E #5880 downloader Error trace:
E #5880 Thread [Main thread]->
E #5880 SessMgr [initializeScript]->
E #5880 creposi [setNextRepositoryToUse]->
E #5880 creposi [downloadFile,SiteStat.xml,C:\Windows\TEMP]->
E #5880 downloader Downloading file from ftp://ftp.nai.com:21/CommonUpdater/SiteStat.xml to C:\Windows\TEMP\SiteStat.xml failed.
