Cloud Workload Security 5.x Known Issues

Technical Articles ID: KB90035
Last Modified: 2023-03-14 09:37:22 Etc/GMT

Environment

Cloud Workload Security (CWS) 5.x

For supported environments, see KB90062 - Supported platforms for Cloud Workload Security.

Summary

Recent updates to this article

Date	Update
March 14, 2023	Added the resolved issues of CWS 5.3.4 General Availability (GA) release.
September 16, 2022	Updated URLs.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Contents
Click to expand the section you want to view:

Product release information

NOTE: View the CWS Release Notes.

Product Version	Release Date
CWS 5.3.4 (GA)	March 14, 2023
CWS 5.3.3 (GA)	April 14, 2020
CWS 5.3.2 (GA)	October 8, 2019
CWS 5.3.1 Hotfix 1273403 (RTS) ¹ (HF1273403)	May 29, 2019
CWS 5.3.1 Hotfix 1266324 (RTS) ¹ (HF1266324)	May 29, 2019
CWS 5.3.1 Hotfix 1265809 Repost (GA) (HF1265809)	March 11, 2018
CWS 5.3.1Hotfix 1266699 (RTS) ¹ (HF1266699) - vSphere Connector	February 27, 2019
CWS 5.3.1 hotfix 1265809 (GA)	February 20, 2019
CWS 5.3.1 (GA)	January 8, 2019
CWS 5.3.0 (GA)	October 9, 2018
CWS 5.2.0 Hotfix 1239584 (GA) (HF1239584) (build 5.2.0.132)	August 23, 2018
CWS 5.2.0 Hotfix 1239584 (RTS) ¹ (HF1239584) (build 5.2.0.117) NOTE: Superseded by the GA Release	July 23, 2018
CWS 5.2.0 (GA)	July 10, 2018
CWS 5.1.0 (GA)	May 8, 2018
CWS 5.0.1(GA)	February 13, 2018
CWS 5.0 Hotfix 1224396 (GA) (HF1224396)	January 9, 2018
CWS 5.0 (GA)	November 30, 2017

GA = General Availability
RTS = Released to Support

¹	To obtain an RTS hotfix, contact Technical Support. See the "Related Information" section for details. Hotfixes are created to address specific issues and are not posted publicly, but are available by contacting Technical Support.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Critical known issues

Reference Number	Related Article	Found	Fixed	Issue Description
1265809	KB91264	5.3.1 Hotfix 1265809	5.3.1 Hotfix 1265809 (Repost)	Issue: Unable to check in CWS 5.3.1 HF1265809 (build 5.3.1.254) to an ePolicy Orchestrator (ePO) Server in FIPS mode. Resolution: CWS 5.3.1 HF1265809 Repost (build 5.3.1.287) has FIPS signing incorporated, and is compatible with ePO configured in FIPS mode. IMPORTANT: Customers who've installed CWS 5.3.1 HF1265809 (build 5.3.1.254) do not need to upgrade to CWS 5.3.1 Repost build 5.3.1.287.
1219469	-	CWS 5.0	CWS 5.3.0	Issue: The CWS screen becomes unresponsive if you click repeatedly on the Issue list and refresh option. Workaround: Press F5 and reload the page.
1239584	-	CWS 5.1.0	CWS 5.2.0 Hotfix 1239584	Issue: After you click Menu, Cloud Workload Security, the ePO console becomes unresponsive and eventually times out. The Orion log records the following error (Debug mode): DEBUG [core-CommandInvoker-thread-159] sqlserver.JtdsStatementRetryInvocationHandler - An exception occurred indicating this statement was chosen to be a deadlock victim. Will roll back transaction and then wait 1380 ms before trying again.
1240960	-	CWS 5.1.0	CWS 5.2.0	Issue: An upgrade from CWS 5.0.1 to 5.1.0 fails. The error log and ePO console display the error below: "java.lang.NullPointerException as the reason for the error" Resolution: This was previously resolved by CWS 5.1.0 Hotfix 1240960 (HF1240960), which was only Released to Support (RTS).

Non-critical known issues

Reference Number	Related Article	Found	Fixed	Issue Description
CWS-5852	-	5.3.3	5.3.4	Issue: Performance issue is caused by the database connection.
CWS-5873	-	5.3.3	5.3.4	Issue: An issue is observed where the 'Registered Cloud Accounts' page fails to synchronize or edit the cloud accounts.
CWS-5853	-	5.3.3	5.3.4	Issue: The CWS extension causes a compatibility issue with ePO - on-prem 5.10.
CWS-5820	-	5.3.3	5.3.4	Issue: Synchronization and registration issues with Azure are observed when there's an update to Java with OKhttp3 in Cumulative Update 9.
CWS-2477	KB92236	5.3.2	5.3.3	Issue: An ePO server with the MDCC extension installed executes queries against the SQL database. In certain circumstances, some of these queries are not closed and remain in a sleeping state.
CWS-5400	-	5.3.2	5.3.3	Issue: When you create an Application Control client task in ePO ([SC: Enable], and the MDCC extension is also checked-in after Application Control), the system shows an error.
CWS-5656	-	5.3.2	5.3.3	Issue: The sync for Citrix XenServer fails with the following error: [core-CommandInvoker-thread-8] scheduler.FullSyncSchedulerCommand - java.lang.NumberFormatException: For input string: "43,36"com.mcafee.scor.exception.Scor.
CWS-5654	-	5.3.2	5.3.3	Issue: During a full sync task, CWS fails to add a system to ePO. A truncation error is recorded.
CWS-1511	-	5.3.2	5.3.3	Issue: Reflected XSS in Microsoft Azure Security Group. It's no longer possible to execute a script in the "Name" and "Port Range" fields of the 'Security Group - Rules.'
1273403	-	5.3.1	5.3.2	Issue: After you successfully upgrade to CWS 5.3.1, the permission sets for the data center display a blank screen. NOTE: This issue was previously fixed with CWS 5.3.1 HF1273403.
1273166	-	5.3.0	5.3.2	Issue: The Orion.log file generates many debug statements as errors. Orion.log example: "ERROR [core-CommandInvoker-thread-7] vconnector.VcenterExtConnector - VCenter account" NOTE: This issue was previously fixed with CWS 5.3.1 HF1266324.
1266699 1266756	-	5.3.0	5.3.1 HF1266699	Issue: After you successfully update the vCenter-stored password in ePO from the Registered Cloud Accounts page, the change isn't applied, even though the save shows successful. When you return to the Registered Cloud Accounts Page, it shows the Last Sync Status as FAILURE.
1266503	KB91264	5.3.1	5.3.1 HF1265809	Issue: Network Traffic Flow Graphics are not displayed for Non-Admin permission set users in the CWS console.
1259737	-	5.0	5.3.1	Issue: The ePO server time zone changes to Coordinated Universal Time (UTC) after the synchronization of the registered Microsoft Azure accounts.
1261925	-	5.3.0	5.3.1	Issue: Performance issues are seen because the following table reaches an excessive size: CWD_THREATEVENTS_LIST Resolution: You can now schedule an automatic cleanup task for CWS tables.
1259422	-	CWS 5.3.0	CWS 5.3.1	Issue: The threat clean-up task doesn't clean up the threats of deleted cloud accounts. Resolution: You can clean up the threats of the deleted cloud accounts with the threat cleanup task.
1219469	-	CWS 5.0	CWS 5.3.0	Issue: The CWS screen becomes unresponsive if you click repeatedly on the Issue list and refresh option. Workaround: Press F5 and reload the page.
1219471		CWS 5.0	CWS 5.3.0	Issue: After multiple clicks, the Status flag might shift and gradually reduce in size on the Issue list page. Workaround: Press F5 and reload the page.
1219445	-	CWS 5.0	CWS 5.3.0	Issue: The VPC list in the left pane is in disable mode after the first account registration. Workaround: We recommend that you press F5 and reload the page.
1219443	-	CWS 5.0	CWS 5.3.0	Issue: If the Total 'Workload Summary' card shows a noticeable number of fewer instances than the 'Events' card, inaccurate data is displayed in the issues count. When the total number of workload instances or events increases, this issue isn't seen.
1218616	-	CWS 5.0	CWS 5.3.0	Issue: CWS isn't resized when moved to a high-resolution monitor, or the screen resolution is flipped dynamically. Workaround: Press F5 and reload the page.
1183939	KB88984	CWD 4.5.1	CWS 5.3.0	Issue: While you upgrade to Cloud Workload Discovery 4.5.1, the sync task incorrectly places some virtual machines in the wrong security group.
1077374	-	CWD 4.0.0	CWS 5.3.0	Issue: [AWS] Dashboard widget 'Data Protection per Cloud VM' present in the Public Cloud dashboard throws an error on removal of other vendor extensions.
-	-	CWD 4.5.x	CWS 5.3.0	Issue: [All Connectors] After you upgrade from CWD 4.0 to CWD 4.5.0 or 4.5.1, the User Interface still displays CWD 4.0 in Firefox. Workaround: After a CWD 4.5 upgrade where the User Interface doesn't show the correct data, clear the Firefox browser cache.
-	-	CWD 4.0.0	CWS 5.3.0	Issue: [AWS] Some field values are empty on the System Properties tab for VMs that aren't managed but are discovered through Cloud connectors. This issue occurs because there's no McAfee Agent (MA) on the systems to retrieve these attributes.
1248594	-	5.2.0	CWS 5.2.0 Hotfix 1239584	Issue: Unable to retrieve the AWS FlowLogs properly when you configure an AWS account with required policies for CWS.
1238565	-	CWS 5.1.0	CWS 5.2.0	Issue: After you register bulk AWS accounts (more than 12 accounts) using a Comma-Separated Values (CSV) text file, you see the following: The primary Master Account details show only 12 accounts. After you select an AWS primary account, the subaccounts section doesn't display the rest of the member accounts; they're hidden.
1239049	-	CWS 5.1.0	CWS 5.2.0	Issue: With the CWS license checked in and Traffic Discovery enabled, after any number of Account Sync actions, Traffic Discovery (for both Primary and Subaccounts) shows the status in Account View as 'NA' (not available).
1224896	-	CWS 5.0.0	CWS 5.1.0	Issue: Virtual Machines (VMs) in the ePO System Tree aren't in the correct group or are deleted after a Cloud Workload SYNC occurs.
1212099	-	CWS 5.0 ENSLTP 10.2.0	ENSLTP 10.2.1	Issue: DAT information doesn't show for Linux systems. Resolution: DAT Assessment is supported with Endpoint Security for Linux Threat Prevention (ENSLTP) 10.2.1 and later.
1216339	-	CWD 4.5.1	CWS 5.0.1	Issue: [Azure] Azure registration fails if ePO is behind the proxy. Workaround: Bypass the proxy.
1215550	-	CWS 5.0	-	Issue: During Account Registration, a policy assignment requires a refresh. Workaround: Press F5 and reload the page.
1219467	-	CWS 5.0	-	Issue: When a user tries to edit an existing account, the Next option is disabled until the password or security key is entered. Workaround: To enable the Next option on the account, edit the page, and enter the password or security key.
1219441	-	CWS 5.0	-	Issue: There's no option to delete the registered OpenStack and Azure Classic accounts after you upgrade to CWS 5.0. Workaround: OpenStack and Azure Classic accounts are not supported in CWS 5.0. Delete the existing Azure Classic and OpenStack accounts before you upgrade to CWS 5.0.
1219440	-	CWS 5.0	-	Issue: The traffic discovery status is shown as True in the Accounts details card, even when the license extension isn't checked in. This issue has no functional impact. The traffic discovery is initiated when the license extension is checked in.
1183922	-	CWD 4.5.0	-	Issue: This issue occurs on MOVE AV Multi-Platform Security Virtual Machines (SVM) that also have VSE installed to protect the system. When the VSE on-access scanner is disabled on the SVM, CWD incorrectly reports the Assessment Status as Protected. Workaround: See the related article for details.
1073988	-	CWD 4.0.0	-	Issue: [vSphere] The ePO dashboard reports the protection status of an OSS server (MOVE Multi-Platform), even though it's protected by VSE.
1171050	KB88233	CWD 4.0.0	-	Issue: Reconciliation fails for a Linux virtual machine if MA is deployed through the Visualization URL method.
1067918	-	CWD 4.0.0	-	Issue: [vSphere] A disconnected host causes duplicate hosts in the MOVE Agentless Deployment User Interface. NOTE: This issue is seen only if a host is added to another vCenter without removing it from the original vCenter.
1015194	-	CWD 4.0.0	-	Issue: [All Connectors] The ENS report displays the wrong product name for Firewall protection.
967721 974039 976728	KB82241	CWD 4.0.0	-	Issue: [AWS] There's a discrepancy between the Data Center Connector dashboard and the ENS Report.
882145	-	CWD 4.0.x	-	Issue: [vSphere] Secondary vCenter server in a Linked mode isn't discovered in the ePO System Tree when you register the Primary vCenter server using the SSO credentials. Workaround: The secondary server is discovered if it's registered separately.

Expected behavior

Reference Number	Related Article	Found	Fixed	Issue Description
1218448	-	CWS 5.0	n/a	Issue: One-step upgrade from CWD 4.0 to CWS 5.0 fails because CWD 4.0 isn't supported on ePO 5.3.3 and 5.9. Resolution: The recommended path to upgrade from CWD 4.0 is to first upgrade to CWD 4.5.1 and then upgrade the ePO Server to ePO 5.9, followed by an upgrade to CWS 5.0.
1219439	-	CWS 5.0	n/a	Issue: An unsupported MA version on the "In the Workload" details card for an instance shows the instance as Unmanaged. Resolution: Upgrade to a supported version of MA.
1203975	-	CWS 5.0	n/a	Issue: Unable to select Protocols while trying to edit the Security Groups on a Microsoft Edge browser. Resolution: Supported browsers for CWS 5.0 are Chrome and Microsoft Internet Explorer.
1170685	-	CWD 4.0.0	n/a	Issue: The NetBIOS name displayed in the CWD user interface isn't user-readable or friendly. When the virtual machine is managed, MA overrides the system name with the host name and the host name is shown under Workload. NOTE: This behavior is expected for MA/ePO.
971355	KB82030	CWD 4.0.0	n/a	Issue: [vSphere] The number of virtual machines available in the ePO System Tree is reported incorrectly. This behavior is expected, and results from an ePO limitation. This behavior occurs when there's more than one computer with the same DNS name and NetBIOS name. But, they reside in different domains, with different domain extensions. Workaround: See the related article for details.
1036127	-	CWD 4.0.0	n/a	Issue: [vSphere] When you upgrade only the Data Center Connector extension from DCC 3.5.0.126 to CWD 4.0, or CWS 5.0, and you're still using DCC 3.5.0.126 for vSphere, the account sync fails and remains in the state 'In Progress.' NOTE: This behavior is as expected. The correct flow is to upgrade both MDCC and vSphere.
892699	-	CWD 4.0.0	n/a	Issue: [vSphere] Computer IP address or Name isn't displayed by drilling down to the respective Dashboard monitor if only a single entry exists. NOTE: This behavior is expected for ePO.
893114	-	CWD 4.0.0	n/a	Issue: [AWS/vSphere] After the server task for computing the dashboard data completes, the results might take a few minutes to refresh on the Dashboard view. NOTE: This behavior is expected for ePO.
887441	-	CWD 4.0.0	n/a	Issue: [vSphere] Sync might not work correctly when there are multiple SVAs with the same host name present in the ePO System Tree. NOTE: This behavior is expected for ePO. Workaround: Make every SVA host name unique.

Product ideas and enhancements

To submit a product idea, see the "Related Information" section.

Reference Number	Related Article	Found	Fixed	Issue Description
1259422	-	5.0.0	CWS 5.3.1	Issue: You can clean up the threats of the deleted cloud accounts using the threat cleanup task.
1224396	-	5.0.0	CWS 5.0 Hotfix 1224396	Issue: [Enhancement] It's now possible to shut down the AWS and Microsoft Azure workloads, as a remediation measure, from the CWS user interface.
885490	-	4.0.0	-	Issue: [vSphere] Limitation: No option to cancel the scheduled sync.
-	-	4.0.0	-	Issue: [AWS] When you click the dashboard for Anti Malware Protection Status, the Firewall Deployed Status column doesn't appear by default. You can add it manually when needed.

Related Information

Contact Technical Support

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Submit a product idea

To submit a new product idea, go to the Enterprise Customer Product Ideas page.

Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website.

For more information about product ideas, see KB60021 - How to submit a Product Idea.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Cloud Workload Security 5.x Known Issues

Environment

Summary

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Cloud Workload Security 5.x Known Issues

Environment

Summary

Related Information

Affected Products

Languages:

Choose your region

Title

Title