Loading...

Knowledge Center


ePolicy Orchestrator audit log records a system being added to ePO that does not exist within the System Tree
Technical Articles ID:   KB91392
Last Modified:  9/30/2019

Environment

McAfee ePolicy Orchestrator (ePO) 5.9.x

Problem

Administrator observes the following:
  • The ePO audit log records a system being added to the System Tree
  • But, the system does not actually exist in the System Tree as a managed node

 

System Change

You installed or upgraded to either ePolicy Orchestrator 5.9.x.

Cause

In some rare scenarios, the platform ID property is missing from the header of the properties package uploaded to ePO.

When the Agent Handler receives this malformed packet:
  • It recognizes that the request is missing data
  • Instead of entirely closing the incoming props request, ePO continues and creates the error condition
  • This action stops a system from being management by ePO, but having a recorded audit log entry stating the contrary

Solution

This issue is resolved in ePO 5.10, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.

Workaround

Reinstall the McAfee Agent on the affected endpoint. If the McAfee Agent sends a complete properties package, including the platform ID within the header, the ePO server can handle the incoming properties package. It adds the system to the System Tree.

Rate this document

Languages:

This article is available in the following languages:

English United States
Spanish Spain

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.