Protection Workspace can't read McAfee Security for Microsoft Exchange events

Technical Articles ID: KB93320
Last Modified: 3/11/2021

Environment

McAfee ePolicy Orchestrator (ePO) 5.10.0
McAfee Protection Workspace extension 1.0 - 1.0.0.1643

Problem

The Protection Workspace extension is unable to read events received from McAfee Security for Microsoft Exchange (MSME).

The ePolicy Orchestrator orion.log fills up with the following error:

WARN [scheduler-TaskQueueEngine-thread-21] threats.ResolvedThreatsAction - Product ID not found for analyzer: MSME____8600

NOTE: There is no impact on the overall ability of ePO to parse, display, and query MSME events. Only the Protection Workspace page and extension do not display data related to those events.

Solution

We investigated this issue and a Proof of Concept (POC) Build is currently available to resolve the issue. To obtain the POC Build, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.

Affected Products

ePolicy Orchestrator 5.10.x
Known Issue/Product Defect

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Japanese
Portuguese Brasileiro
Chinese Simplified

Knowledge Center

Protection Workspace can't read McAfee Security for Microsoft Exchange events

Environment

Problem

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Protection Workspace can't read McAfee Security for Microsoft Exchange events

Environment

Problem

Solution

Affected Products

Languages:

Choose your region

Title

Title