Knowledge Center

ePolicy Orchestrator audit log records a system being added to ePO that does not exist within the System Tree
Technical Articles ID:   KB91392
Last Modified:  9/30/2019


McAfee ePolicy Orchestrator (ePO) 5.9.x


Administrator observes the following:
  • The ePO audit log records a system being added to the System Tree
  • But, the system does not actually exist in the System Tree as a managed node


System Change

You installed or upgraded to either ePolicy Orchestrator 5.9.x.


In some rare scenarios, the platform ID property is missing from the header of the properties package uploaded to ePO.

When the Agent Handler receives this malformed packet:
  • It recognizes that the request is missing data
  • Instead of entirely closing the incoming props request, ePO continues and creates the error condition
  • This action stops a system from being management by ePO, but having a recorded audit log entry stating the contrary


This issue is resolved in ePO 5.10, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.


Reinstall the McAfee Agent on the affected endpoint. If the McAfee Agent sends a complete properties package, including the platform ID within the header, the ePO server can handle the incoming properties package. It adds the system to the System Tree.

Rate this document


This article is available in the following languages:

English United States
Spanish Spain

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.