Loading...

Knowledge Center


ePolicy Orchestrator audit log records a system being added to ePO that does not exist within the System Tree
Technical Articles ID:   KB91392
Last Modified:  3/27/2019

Environment

McAfee ePolicy Orchestrator (ePO) 5.9.x, 5.3.x

Problem

ePolicy Orchestrator audit log records a system being added to the System Tree, but the system does not actually exist in the System Tree as a managed node.

 

System Change

You installed or upgraded to either ePolicy Orchestrator 5.9.x or 5.3.x.

Cause

In some rare scenarios, the platform ID property is missing from the header of the properties package uploaded to ePO. When the handler receives this malformed packet, it recognizes that the request is missing data. Instead of entirely closing the incoming props request, ePO continues and creates the error condition that stops a system from management by ePO, but having a recorded audit log entry stating the contrary.

Solution

This issue is resolved in ePO 5.10, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.

Workaround

Reinstall the McAfee Agent on the affected endpoint. If the McAfee Agent sends a complete properties package, including the platform ID within the header, the ePO server can handle the incoming properties package. It adds the system to the System Tree.

Rate this document

Beta Translate with

Select a desired language below to translate this page.

Glossary of Technical Terms


 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.