Knowledge Center

ePolicy Orchestrator audit log records a system being added to ePO that does not exist within the System Tree
Technical Articles ID:   KB91392
Last Modified:  3/27/2019


McAfee ePolicy Orchestrator (ePO) 5.9.x, 5.3.x


ePolicy Orchestrator audit log records a system being added to the System Tree, but the system does not actually exist in the System Tree as a managed node.


System Change

You installed or upgraded to either ePolicy Orchestrator 5.9.x or 5.3.x.


In some rare scenarios, the platform ID property is missing from the header of the properties package uploaded to ePO. When the handler receives this malformed packet, it recognizes that the request is missing data. Instead of entirely closing the incoming props request, ePO continues and creates the error condition that stops a system from management by ePO, but having a recorded audit log entry stating the contrary.


This issue is resolved in ePO 5.10, which is available from the Product Downloads site at: http://mcafee.com/us/downloads/downloads.aspx

NOTE: You need a valid Grant Number for access. KB56057 provides additional information about the Product Downloads site, and alternate locations for some products.

Updates are cumulative; Technical Support recommends that you install the latest one.


Reinstall the McAfee Agent on the affected endpoint. If the McAfee Agent sends a complete properties package, including the platform ID within the header, the ePO server can handle the incoming properties package. It adds the system to the System Tree.

Rate this document

Beta Translate with

Select a desired language below to translate this page.


This article is available in the following languages:

English United States
Spanish Spain

Glossary of Technical Terms

 Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.