Enabling Remote Viewing of McAfee Agent log in ePO

As I have recently found out, to remotely view the McAfee Agent logs in ePolicy Orchestrator 4.5 you need to enable it from the Policy Catalog.

First log into ePO 4.5, navigate to the Policy Catalog and select the product as McAfee Agent. The catagory is General and then select your policy and click “Edit Settings”

On the “General” tab untick “Accept connections only from the ePO server”

Click on the “Logging” tab and then tick “Enable remote access to log”. Click save and off you go.

You will need to wait for the policy to apply through ePO to the McAfee Agent on the machine you are trying to view and then you should be all done.

McAfee Problems

 

 

I updated McAfee VirusScan Enterprise to 8.7i and as such opened up a new bunch of problems that go along with a company wide upgrade.

ePO: Compliance Summary is showing all upgraded workstations as Non-Compliant.

Any Summaries are either going to come up as non-compliant or as [ Blank ] when being reported on. This is because ePO doesn’t know about 8.7i until the VSE 8.7i extension is added into ePO.

With the latest download from McAfee you need to extract VSE870LMLRP1, log into ePO go to Configuration/Extensions, then Install Extension, browse to the unzipped files and select VIRUSSCAN8700.zip and click OK.

Backup Exec System Recovery emails not being sent

We run BESR here and as a result with the upgrade of VSE, for whatever reason it didn’t keep the policy from 8.5i. I know there is probably an easy explanation for this, like I didn’t package the zip before checking it in or something but as a result BESR doesn’t email backup notifications anymore.

The simplest fix for this is to into ePO, select Systems, then locate your exchange (as in my case) server and select More Actions/ Modify Policies on a Single System.  Click Edit Assignment on Access Protection Policies, Break inheritance and assign policy and settings below, Edit Policy, Anti-virus Standard Protection and untick Prevent mass mailing worms from sending mail.

The add-in “C:\Program Files\McAfee\VirusScan Enterprise\Scanotlk.dll” could not be installed or loaded. This problem may be resolved by using Detect and Repair on the Help menu.

This error happens if Outlook is open while VirusScan Enterprise tries to run the update. The fix is pretty simple, navigate to %Userprofile%\Local Settings\Application Data\Microsoft\Outlook\and delete extend.dat

To run from the command line or a script:

XP: de  “%Userprofile%\Local Settings\Application Data\Microsoft\Outlook\Extend.dat”

Vista:
del /q /f /s “C:\Users\%username%\AppData\Local\Microsoft\Outlook\Extend.dat”

Ok I have just found How to delete the Extend.Dat for Outlook on a client computer using VirusScan Enterprise 8.x via ePolicy Orchestrator 4.0 from the McAfee website which tells you how to do it via ePO