How to manually check in the MEDDAT to the Master Repository

Technical Articles ID: KB93000
Last Modified: 3/31/2022

Environment

ePolicy Orchestrator (ePO) 5.x
Endpoint Security for Linux Threat Prevention (ENSLTP) 10.7.0 and later
Endpoint Security for Mac (ENSM) Threat Prevention 10.7.0 and later
Medium DATs (MEDDAT)

Summary

ENSL and ENSM Threat Prevention 10.7.0 and later use MEDDAT for scans. These versions no longer use the V2 DATs.

IMPORTANT:

An MEDDAT ePO deployable package isn’t available on our security update website.
An MEDDAT can only be added to the ePO Master Repository automatically, using a Pull Task.
Make sure that you select MEDDAT XXXX.0000 in the Package Selection section. Example: MEDDAT 427.0000.

If you don’t have internet access on your ePO server, follow the steps below to check in the MEDDAT manually:

Download the datdet.mcs file from Update.nai.com.
Download the following files from Update.nai.com:
- Gem Files (.gem)
- extradat.mcs
- meddatinstall.mcs
- gdeltamed.ini
- mediumdat-****.zip
- pkgcatalog.z
Create a folder.
Copy the files listed in step 1 and step 2 to the folder.
Compress the new folder into a WinZip file.
Check in the package to the ePO Master Repository for deployment.
Make sure you select MEDDAT in your daily product update client task.

Affected Products

DAT
Endpoint Security for Linux Threat Prevention 10.x
Endpoint Security for Mac Threat Prevention 10.x
ePolicy Orchestrator 5.10.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

How to manually check in the MEDDAT to the Master Repository

Environment

Summary

Affected Products

Languages:

Title

Title

Knowledge Center

How to manually check in the MEDDAT to the Master Repository

Environment

Summary

Affected Products

Languages:

Choose your region

Title

Title