Trellix Agent 5.7.x Known Issues

Technical Articles ID: KB93773
Last Modified: 2023-06-26 15:42:08 Etc/GMT

Environment

McAfee Agent (MA) 5.7.6 and earlier
Trellix Agent (TA) 5.7.7 and later

For environment information, see KB51573 - Supported platforms for Trellix Agent 5.x.

NOTE: MA was rebranded to TA in version 5.7.7.

Summary

Recent updates to this article

Date	Update
June 26, 2023	Revised the release date details for TA 5.7.9 Hotfix 1 (GA) and TA 5.7.9 (GA).
June 7, 2023	Updated the release date details for TA 5.7.9 Hotfix 1 (GA) and TA 5.7.9 (GA).
May 23, 2023	Removed MA-10726 from the "Investigating" section.

To receive email notification when this article is updated, click Subscribe on the right side of the page. You must be logged on to subscribe.

Contents
Click to expand the section you want to view:

Product release information

NOTE: Release notes are now posted on the Product Documentation portal.

Version	Release date
TA 5.7.9 Hotfix 1 (GA)	May 16, 2023
TA 5.7.9 (GA)	March 30, 2023
TA 5.7.8 Hotfix 2 (for ePO SaaS only) (GA)	February 3, 2023
TA 5.7.8 Hotfix 1 (GA)	December 13, 2022
TA 5.7.8 (GA)	November 29, 2022
TA 5.7.7 Hotfix 1 (for ePO Cloud) (GA)	August 9, 2022
TA 5.7.7 (GA)	July 26, 2022
MA 5.7.6 (GA)	April 12, 20222
MA 5.7.5 (GA)	January 18, 2022
MA 5.7.4 (GA)	September 21, 2021
MA 5.7.3 (GA)	June 8, 2021
MA 5.7.2 (GA)	March 16, 2021
MA 5.7.1 Hotfix 2 (RTS)	April 16, 2021
MA 5.7.1 Hotfix 1 (RTS)	March 24, 2021
MA 5.7.1 (GA)	January 12, 2021
MA 5.7.0 (GA)	December 8, 2020

We investigated this issue and a solution is currently available. This solution is currently not generally available, but is in Released to Support (RTS) status. To obtain the RTS build, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.

See KB51560 - On-premises product release cycle for more information.

Issue resolutions in updates and major releases are cumulative; Technical Support recommends that you install the latest version. To find the most recent release for your product, go to the Product Downloads site.

Critical known issues

Reference Number	Related Article	Found In	Fixed In	Issue Description
SAGMA-383	SB10396	5.7.8	5.7.9	Issue: An improper preservation of permission vulnerability is seen on Windows.
SAGMA-384	SB10396	5.7.8	5.7.9	Issue: The heap-based buffer overflow vulnerability.
SAGMA-381	SB10391	5.7.7	5.7.8	Issue: An uncontrolled search path vulnerability is seen on Windows.
SAGMA-368	SB10385	5.7.5	5.7.7	Issue: TA DLL Hijacking vulnerability.
SAGMA-364	-	5.7.0	5.7.6	Issue: MA Local Privilege Escalation vulnerability.
SAGMA-359	-	5.7.0	5.7.6	Issue: PSIR-409 SQL Injection to execute system commands vulnerability.
MA-10536	-	5.7.3	5.7.6	Issue: PSIR-288 - McAfee Agent - Storing Passwords in a Recoverable Format
SAGMA-357	SB10378	5.7.0	5.7.5	Issue: Resolves a command injection vulnerability where a local user injects an arbitrary shell code into the cleanup.exe file. (CVE-2021-31854)
SAGMA-358	SB10378	5.7.0	5.7.5	Issue: Resolves a privilege escalation vulnerability. (CVE-2022-0166)
SAGMA-355	-	5.7.0	5.7.4	Issue: Side loading vulnerability in mfemactl.
SAGMA-356	-	5.7.0	5.7.4	Issue: Privilege Escalation vulnerability while running mfemactl.exe.
MA-5319	-	5.7.0	5.7.4	Issue: A memory corruption vulnerability exists in the libma_msgbus library that's used by the MA software.
MA-12201	SB10369	5.7.0	5.7.4	Issue: DLL injection into MA process FrmInst, mcupdater, UpdaterUI, and McScanCheck via the Appinit_Dll method.
MA-12202	SB10369	5.7.0	5.7.4	Issue: Unauthorized use of maconfig.exe allows exposure of sensitive information to low privileged users.
SAGMA-329	SB10362	5.7.0	5.7.3	Issue: User with valid credentials can perform a DLL preloading attack with unsigned DLLs. [Windows only]
MA-10649	SB10362	5.7.0	5.7.3	Issue: MA doesn't block local users from modifying the event logs before sharing them with the ePO server. [Windows only]
SAGMA-84 SAGMA-85	-	5.7.0	5.7.3	Issue: Mutex names that are hardcoded in the code result in some third-party actors holding the same mutex and delay the MA installation time. [Windows only]
MA-9337	KB94093		5.7.2	Issue: MA becomes unresponsive. A system crash occurs on the macompatsvc.exe process, which crashes the Window Management Instrumentation process on servers [Windows only]. Resolution: MA 5.7.2 services now correctly use the resources during the property collection.
SAGMA-353	-	5.7.0	5.7.1	Issue: MA blocks Endpoint Security (ENS) updates as an incorrect buffer access vulnerability.

Non-critical known issues

Reference Number	Related Article	Found In	Fixed In	Issue Description
TA 5.7.9 Resolved
MA-14433	-	5.7.8	5.7.9	Issue: When you View or Edit the Policy under Policy Catalog, you notice that the Policy Catalog page displays "McAfee."
MA-14430	-	5.7.8	5.7.9	Issue: When you select a New Task under Client Task Catalog, you see "McAfee" appear in the Task Types drop-down list.
MA-14448	-	5.7.8	5.7.9	Issue: In the Queries and Reports page, the query names are displayed with "McAfee."
TA 5.7.8 Resolved
MA-14509	-	5.7.8	5.7.8 Hotfix 2 (for ePO SaaS)	Issue: The System Tree page displays duplicate entries due to case sensitive SMBIOS UUID detection for Linux operating systems.
MA-14065	-	5.7.6	5.7.8	Issue: MA 5.7.6 displays an error message when it's installed on SUSE Linux Enterprise Server 15 version.
MA-13959	-	5.7.5	5.7.8	Issue: The Relay Server configured with SuperAgent capabilities on a Windows system stops serving relay clients after a while.
MA-14067	-	5.7.5	5.7.8	Issue: The Relay Server configured with SuperAgent capabilities on a Linux system stops serving relay clients after a while.
MA-14217	KB96023	5.7.6	5.7.8	Issue: TA fails to download complete policies. The error below is recorded in the masvc.log file: Error: Policy service start db validation failed, generating event for EPOAGENT3000
TA 5.7.7 Resolved
MA-14068	KB95786	5.7.6	5.7.7 Hotfix 1 (for ePO Cloud)	Issue: TA is unable to communicate with MVISION ePO on macOS M1 hardware. [macOS only] Resolution: This issue is resolved by selecting the appropriate cipher for communication.
MA-13179	-	5.7.0	5.7.7	Issue: Communication between TA and MVISION ePO-provisioned NDLP fails after upgrade to TA 5.7.x.
MA-13870	-	5.7.5	5.7.7	Issue: [Installation] The TA doesn't generate a successful event ID: 2411 after a fresh installation or upgrade of TA. [Windows only]
MA-13881	-	5.7.3	5.7.7	Issue: The TA wake-up call fails on SELinux systems when the wake-up port number is configured below 1024.
MA-13936	-	5.7.5	5.7.7	Issue: You're unable to delete WindowsUpdate.log on Windows Server 2012R2 after installation of MA 5.7.5.
MA-13162	-	5.7.0	5.7.7	Issue: On SELinux systems, the denied error messages are reported in the audit log during cmdagent operation.
MA-13720	-	5.7.4	5.7.7	Issue: The SuperAgent Distributed Repository (SADR) displays an error "Site catalog not found" when you select View Repository on the ePO console.
MA-13841	-	5.7.4	5.7.7	Issue: The System Tree page displays the User Name as "root" instead of the current logged-in user in ePO. Resolution: This issue is resolved by increasing the User Name characters up to 31.
MA-13843	-	5.7.5	5.7.7	Issue: MA 5.7.5 on Windows Server 2012R2 doesn't apply or enforce Host Intrusion Prevention firewall policies.
MA-13850	-	5.7.3	5.7.7	Issue: On the ePO server, while Data Base Mirroring is enabled, you see the following messages in the Server.log file: NAIMSERV Agent SPIPE property User1 specified Font Driver Host\UMFD-0 missing policy version, assuming 0
MA-13872	-	5.7.5	5.7.7	Issue: On the ePO console, the incorrect text displays as "agent.rolefactory.sst.key:" in the Permission Set page.
MA-13953	-	5.7.5	5.7.7	Issue: High CPU usage is observed while checking the status of the TA service. [Linux only]
MA-13977	-	5.6.5	5.7.7	Issue: The McScript.log isn't rotated to follow the configuration of the TA policy. [Linux only] Resolution: Updated the McScript.log with a maximum file size of 10 MB and 10 rollover counts.
MA-13978	-	5.7.4	5.7.7	Issue: During installation of TA 5.7.x, the signature verification fails for RPM files. [Linux only]
MA-13986	KB95568	5.7.6	5.7.7	Issue: Microsoft Windows operating systems shows the following: Unknown OS
MA-14027	KB95755	5.7.6	5.7.7	Issue: The product version build numbers display an incorrect value in ePO, due to a misplaced dot after the minor version.
MA 5.7.6 Resolved
MA-13946	-	5.7.5	5.7.6	Issue: MA binaries weren't code signed and generated a security warning when trying to upgrade the Agent. MA binaries (cleanup.exe and FrameworkPackage.exe) are now code signed by Trellix.
MA-8123	-	5.7.4	5.7.6	Issue: On a Linux system, the dpkg installation scripts aren't assigned owners.
MA-13648	-	5.7.5	5.7.6	Issue: Agent Embedded package installation fails owing to a blank decrypted password. The error below is displayed when the failure occurs: Please verify embedded credentials are correct' and error in frminst.log error: 'Failed CreateProcessWithLogonW(), error 1326'
MA-13415	KB95050	5.7.4	5.7.6	Issue: Windows 11 systems are incorrectly identified as Windows 10 systems.
MA-13141	-	5.7.2	5.7.6	Issue: IPv6 information is no longer reported after upgrading from MA 5.6.6 to MA 5.7.2. MA 5.7.2 to MA 5.6.5 only report IPv4 details.
MA-13549	KB95028	5.7.4	5.7.6	Issue: Updates fail on Linux systems. The error below is recorded in the McScript.log file: Couldn't open to read: No such file or directory Workaround: See the related article for details.
MA-13741	KB95297	5.7.4	5.7.6	Issue: The MA service (MASVC) closes unexpectedly on Windows 7.
MA-13784	-	5.7.5	5.7.6	Issue: MA 5.7.5 extension upgrade fails with the error below: There is already an object named 'FK_MAEnforcementStatus_EPOProductProperties' in the database
MA-13735	-	5.7.4	5.7.6	Issue: Unable to install or upgrade to File and Removable Media Protection (FRP) 5.4. The error below is seen on the client: Error occurred while downloading eeff-detect.mcs.' Error occurred while installing EEFF____5000
MA-10698	-	5.7.4	5.7.6	Issue: Several policies are unexpectedly updated during a content update. The action causes MA to send out hundreds of requests from every agent, resulting in the Agent Handler incurring 100% CPU.
MA-13785	KB95216	5.7.4	5.7.6	Issue: The MA 5.7.5 and 5.7.4 deployment task continuously executes and generates new events. The detection script fails and generates the error below: ScrptExe Executing section: [SendFailEvent] ScrptMgr Error occurred while installing EPOAGENT3000.
MA-13790	-	5.7.0	5.7.6	Issue: MVISION Endpoint Detection and Response isn't using the defined proxy settings. The EDR client to cloud token and trace fail when a PAC file is used.
MA 5.7.5 Resolved
MA-10504	-	5.6.6	5.7.5	Issue: [Installation] Policy migration from ePO on-premises to MVISION ePO fails. The Audit log records the error below: Error importing policies: Violation of UNIQUE KEY constraint 'IX_EPOPolicySettingValues_SettingSectionSetting'
MA-13218	-	5.7.1	5.7.5	Issue: [Installation] Installing MA on Windows systems via the command line fails to keep the GUID. This issue is seen when using the command-line switches /InstDir and /Keepguid.
MA-9222		5.6.0	5.7.5	Issue: A performance issue is seen after upgrading MA on a Linux system. The /opt/McAfee/agent_upd folder is being filled up every day, using up the available disk space.
MA-12157	KB94958	5.7.2	5.7.5	Issue: On a Virtual Desktop Infrastructure client, the DXL lookup fails with the error below: Request Timed Out Workaround: See the related article for details.
MA-13212	KB94871	5.7.2	5.7.5	Issue: The MA database is locked on Linux systems. You see this issue after you restart the masvc service when the database check and restore functionality is called twice.
MA-13514	KB95030	5.7.4	5.7.5	Issue: MA on Windows systems is unable to communicate with ePO through a proxy. This issue occurs when MA is unable to detect the PID for Windows. The error below is recorded in the masvc.log file: Request failed with curl error <7>, response code <0>, http connect code 0
MA-13658	-	5.7.0	5.7.5	Issue: Intermittently, MA (masvc.exe) is unable to free the policy objects, resulting in high memory usage on some Windows systems.
MA-12735	-	5.7.4	5.7.5	Issue: MA doesn't report the Windows Embedded Standard 7 edition. This issue causes problems when you create a deployment task, and are unable to select the specific operating system for the deployment task.
MA-12673	-	DXL 6.0	5.7.5	Issue [DXL] The DXL Client fails to acknowledge MA proxy exclusions, and fails to communicate with the DXL Broker through a proxy.
MA 5.7.4 Resolved
MA-12208	KB94546	5.7.0	5.7.4	Issue: The agent status monitor isn't displayed. Communication with the ePO server fails. You see the error below when you try to access the monitor using the following command: C:\Program Files\McAfee\Agent>cmdagent.exe -i Output: "Failed to get ma info, error code <6>"
MA-9320	-	5.7.0	5.7.4	Issue: High CPU usage is observed in the masvc service when managed products like Solidcore and ENS are installed in the Windows environment.
MA-10695	-	5.7.0	5.7.4	Issue: High amount of memory usage is seen because of masvc.exe. MA stops communicating with ePO after days until the system is restarted. (Windows) Resolution: The global session context is created for WinHTTP with a timeout, so that WinHTTP responds to all MA queries without ending up being unresponsive.
MA-12061	KB94448	5.7.0	5.7.4	Issue: User-Based Policies aren't processed after you upgrade to FRP 5.4.x. Workaround. See the related article for details.
MA-10927	-	5.7.0	5.7.4	Issue: The postpone pop-up window doesn't appear on the client when the task Schedule 'At Logon' is selected. (Windows)
MA-12138	-	5.7.0	5.7.4	Issue: When a proxy is enabled, the agent-to-server communication fails when the current user logs out. (Windows)
MA-12170	-	5.7.0	5.7.4	Issue: The time at which the telemetry task runs can't be controlled. (Windows) Resolution: The telemetry task is now randomized with an interval of one hour.
MA-12199 MA-12632	-	5.7.0	5.7.4	Issue: A performance issue is observed when the Policy Integrity Check takes longer than expected. (Windows only)
MA-12208	-	5.7.0	5.7.4	Issue: When the WinHttpGetProxyForUrl gets stuck, it causes the masvc service to become unresponsive. (Windows) Resolution: This issue is resolved by adding WinHttpSetTimeouts.
MA-12238	--	5.7.0	5.7.4	Issue: The Sitestat.xml and the Agent GUID folder are left in the Windows temp folder when the mirror.log stops unexpectedly. Sitestat.xml remains disabled in the mirror repository location. Resolution: The timeout of marepomirror.exe is changed from 2 to 6 hours to avoid displaying the repository in the disabled state.
MA-12497	-	5.7.0	5.7.4	Issue: Closing mfemactl.exe doesn't release the AAC handle created using the AAC create control API. This issue causes a huge number of zombie references to mfemactl.exe in the kernel space.
MA-12733	-	5.7.0	5.7.4	Issue: [DXL] Double byte characters aren't displayed correctly in the DXL section on the MA About dialog box.
MA-12734	KB94694	5.7.0	5.7.4	Issue: After every MA update, multiple folders remain in the Windows\temp folder. Some folders might contain sitestat.exe, but many are blank.
MA-10497	-	-	5.7.4	Issue: [DXL/Installation] When an upgrade or installation of the MA fails, the DXL client is still installed. Resolution: With MA 5.7.4 and later, if the installation or upgrade of MA fails, the installation of the DXL client is canceled.
MA-12633	-	-	5.7.4	Issue: [DXL/Installation] Installation of DXL fails when the temp directory doesn't have the execute permission, causing the DXL installation to fail. (Linux)
MA-9845	KB93814	5.7.0	5.7.4	Issue: [Installation] Smart Installation throws a password log-on prompt in silent mode. (Mac)
MA-12152	-	5.7.0	5.7.4	Issue: [Installation] MA installation via JAMF PRO (third-party tool) fails when executed from a read-only directory. (Mac)
MA-12181	-	5.7.0	5.7.4	Issue: [Installation] The Product Deployment task for uninstalling MA fails when other operating system products are included in the product deployment list. (Linux and Mac)
MA-12546	-	5.7.0	5.7.4	Issue: [Installation] The Home directory created during an install isn't removed. (Linux) Resolution: Another check is added for non-debian systems. The mfe user's home directory isn't created in the correct location and with appropriate user permissions to ensure successful installation of MA.
MA-12633	-	5.7.0	5.7.4	Issue: [Installation] MA installation fails if the /tmp directory doesn't have executable permissions. (Linux). Resolution: The installation now continues by extracting the files and executing the installer from the /var location.
MA-12635		5.7.1	5.7.4	Issue: [Installation] Installation fails when the usernames include a space. (Mac}
MA-12636		5.7.0	5.7.4	Issue: [Installation] MA fails to install if the mfe user isn't initially created. (Linux). Resolution: MA 5.7.4 now checks for the mfe user availability, and creates it, if not present.
MA-12637	-	5.7.0	5.7.4	Issue: [Installation] The macmnsvc service fails to start after upgrading to MA 5.7. The failure causes DAT updates to later fail. (Linux)
MA-12545	KB94849	5.7.0	5.7.4	Issue: CentOS servers are incorrectly reported as Workstations on the ePO console System Property page. (Linux)
MA-12762	-	5.7.0	5.7.4	Issue: Uninstalling MA fails to properly clean up all MA-related files. (Mac)
MA-12680	-	5.7.2	5.7.4	Issue: DAT updates fail. During a DAT update, MA fails to write to /var/McAfee/agent/update/UpdateHistory.ini file (Mac and Linux). Resolution: MA 5.7.4 now checks the integrity of the UpdateHistory.ini during an update and re-creates it if corrupted.
MA-5251	KB93642	5.7.0	5.7.4	Issue: During policy enforcement, high CPU utilization is observed in the masvc service. You see this issue after you install a few managed products in a certain order, and when the Solidcore service is in the Windows environment. Resolution: This issue is fixed in MA 5.7.4, which hasn't been released. NOTE: This issue was previously resolved with MA 5.7.1 Hotfix 1 (RTS).
MA 5.7.3 Resolved
MA-12136	-	5.7.1	5.7.3	Issue: [Installation] MA doesn't retain the same GUID after installing it through the command string on the same installation directory. [Windows only] framepkg.exe /Install=Agent /InstDir="C:\Agent" /forceinstall /keepguid
MA-12062	KB94375	5.7.1	5.7.3	Issue: [Installation] AgentMode in mainfo.ini isn't available during a fresh installation or upgrade to MA 5.7.2, due to sourcing of root profiles, which causes the post installation script to close unexpectedly. [Linux only] Workaround: See the related article for details.
MA-3538	KB94374	5.7.0	5.7.3	Issue: [Installation] Reboot of the client system doesn't adhere to the Force automatic reboot after the (seconds) option is set in the MA General policy. [Windows only]
MA-10402	KB94087	5.7.0	5.7.3	Issue: [Installation] MA installation on RHEL 8.x fails after enabling either the FIPS mode or strict Digest option. [Linux only] NOTE: This issue was previously resolved with MA 5.7.1 Hotfix 2 (RTS).
MA-10960	-	5.7.0	5.7.3	Issue: [Installation] MA fails to set a fallback mechanism for the hdiutil attach command so that it mounts to the default path (/Volumes/MFEMA). [Mac only] The error below is seen during installation: "hdiutil: attach failed - no mountable file systems expected CRC32 $D8D5739D hdiutil"
MA-12178	-	5.7.0	5.7.3	Issue: [Installation] MA incorrectly copies the secure ports, resulting in a failed installation through the Smart Installer. This issue is seen when the length of the HTTP port is greater than that of the HTTPS port. [Windows, Linux, and Mac]
MA-5083	-	5.7.0	5.7.3	Issue: The disk space for Macintosh client systems with Apple File System is incorrectly reported on the ePO console System Property page. (Mac only)
MA-9906	KB94318	5.7.1	5.7.3	Issue: The corrupted map objects in a Linux Operating System crashes the MA macmnsvc service of a Linux Operating System. This issue is seen when configured with a DXL broker and SADRs (lazy-caching). [Windows, Mac, and Linux]
MA-10713	-	5.7.1	5.7.3	Issue: The MA service fails owing to incorrect System Library path settings. The system directory path (LD_LIBRARY_PATH) isn't set correctly in the MA services. [Linux only]
MA-10478	-	5.7.0	5.7.3	Issue: The 'Run Client Task Now' status observed when downgrading ENS doesn't report correctly to the ePO server. [Windows only]
MA-10726	KB94099	5.7.0	5.7.3	Issue: Some tasks from the ePO server fail to reach the client system due to the reporting of Private IP address, instead of the Tunnel IP address, when connected to the Virtual Private Network. [Mac only]
MA-10944	KB94195	5.7.0	5.7.3	Issue: Agents fail to communicate to ePO after using the /forceinstall switch to upgrade from MA 5.6.6 to MA 5.7.2 or earlier. [Windows only] Resolution: MA 5.7.3 retains both the GUID and sequence number when it's upgraded from 5.6.6.
MA-10729	KB93049	5.7.0	5.7.3	Issue: You're unable to upgrade the MA Extension to MA 5.7.x. The Orion.log records the error below: "FOREIGN KEY constraint" "FK_MAEnforcementStatus_EPOProductProperties"
MA 5.7.2 Resolved
MA-10685	KB94086	5.7.0	5.7.2	Issue: [Installation] SmartInstall.exe tries to download the agent using a non-secure port and fails. [Windows, Mac, and Linux] Resolution: The SmartInstaller now uses only the secure port (443 or 446) to download packages.
MA-8432	-	5.7.0	5.7.2	Issue: MA reports the IPv6 link local address as the active IP address to ePO. [Windows, Mac, and Linux]
MA-8954	-	5.7.0	5.7.2	Issue: MA becomes unresponsive (crashes) owing to unsynchronized access to data structures. This issue occurs when two threads simultaneously access the notification data list. [Windows only]
MA-9469	-	5.7.0	5.7.2	Issue: After you upgrade ENS, the scheduled on-demand scan or policy-based task fails to start. [Windows, Mac, and Linux]
MA-9709	KB94064	5.7.0	5.7.2	Issue: When you run the noguid agent command to prepare for an image, the current Agent GUID doesn't get removed from the registry. [Windows only]
MA-9710	-	5.7.0	5.7.2	Issue: The default Windows recovery options set in the MA services for when a catastrophic failure occurs is 'take no action.' [Windows only]
MA-9907	-	5.7.0	5.7.2	Issue: Randomization fails for scheduled tasks set to execute with a relatively short time frame. [Windows, Mac, and Linux]
MA-10443	-	5.7.0	MA 5.7.2	Issue: You're unable to start the MA services with or without the substitute user permission. Seen on a non-Windows platform. [Mac and Linux]
MA-10495	-	5.7.0	5.7.2	Issue: Applying an incorrect or incomplete policy due to network interruption causes systems to block all connections. [Windows]
MA-10566	KB94109	5.7.0	5.7.2	Issue: MA fails to report Windows Core servers as 'Server' to ePO. Windows Server Core systems are reported as 'unknown.' The incorrect reporting occurs from both Windows 2019 and Core Windows Server 2016 Core. [Windows]
MA-10712	-	5.7.0	5.7.2	Issue: MA self-protection blocks the upgrade of the standalone version of ENS. [Windows only]
MA-10728	-	5.7.0	5.7.2	Issue: After the start of the UpdaterUI.exe, MA doesn't release the UpdaterUI.exe handles. [Windows only]
MA 5.7.1 Resolved
MA-9477	-	5.7.0	5.7.1	Issue: Under certain scenarios, DLP Endpoint client fcag.exe crashes when using the MA START/STOP commands. [Windows only] Resolution: The C APIs in DXL have been modified to address the potential crash points.
MA-10942		5.7.0	5.7.2	Issue: The IP used by MA for communication to ePO isn't updated in System Property collection if a certain IP isn't reachable. For example, MA reports IPv6 as the active source IP address, while the communication occurs via IPv4. MA is unable to detect the change in IP address, or unable to report the IP address that's reachable. When you disable the IP address on which communication isn't reachable, MA reports the correct IP address. Both IPv4 and IPv6 are impacted. [Windows, Mac, and Linux]
MA 5.7.1 Resolved
MA-10436	-	5.7.0	5.7.1	Issue: A database connection leak occurs when using the Single System Troubleshooting feature.
MA-10331	-	5.7.0	5.7.1	Issue: Including a "{" in the URL results in a curl request failure for the squid proxy server. (Windows, Mac, and Linux) Resolution: Encoding changes from "{" to %7B, and "}" to %7D.
Investigating
MA-14913	-	5.7.9	-	Issue: After an upgrade to TA 5.7.9, the FRP policies don't apply through the Policy Assignment Rule (User-Based Policy). Workaround: Follow the workaround in KB94448 - User-Based Policies aren't processed after you upgrade to File and Removable Media Protection 5.2.0 or Later and reboot the client machine.
MA-14851	-	5.7.9	-	Issue: The CPU usage shows as 0 (zero) for macOS on ePO.
MA-13955	-	5.7.4	-	Issue: Point Products fail to communicate with MA over MsgBus on few Windows x86 versions.
MA-13948	-	5.7.6	-	Issue: After an upgrade to MA 5.7.6 in unmanaged mode, if any database corruption occurs, the database restore option fails. After MA upgrade in unmanaged mode, the "mapolicy.db.config" isn't created in the Agent's database folder. So, if any database corruption happens, the database restore attempt fails. Workaround: Remove MA from the client system using the following command: 32-bit operating system: <SystemDrive>\ProgramFiles\McAfee\Agent\FrmInst.exe /forceuninstall 64-bit operating system: <SystemDrive>\ProgramFiles\McAfee\Agent\x86\FrmInst.exe /forceuninstall Install the MA 5.7.6 Agent in unmanaged mode. Unzip the MA 576 package and double-click the FramePkg_UPD.exe of MA 5.7.6.
MA-10711	KB94094	5.7.0	-	Issue: Although the installation of MA is successful, the agent services don't start. The agent log records the error below [Linux]: masvc.Error: io service create Failed
MA-9841	KB93816	5.7.0	-	Issue: [Installation] After you install MA 5.7.0 using either the install.sh or install_upd.sh -b option, you observe the following: MA services aren’t running. MA logs record multiple failed messages. For example: "Failed to create data store, error" NOTE: No issue is seen during an upgrade to MA 5.7.0. Workaround: See the related article for details.
MA-10543	-	5.7.0	-	Issue: Fails to clean up an empty temporary directory, which is created during a sitestat.xml download failure. The failed download occurs owing to a temporary network problem. IMPORTANT: There's no impact on any product functions. Occurrences of this issue are rare, and can only be seen during a failure to download the sitestat.xml. Any remaining temporary folders can be deleted manually. After a successful download reattempt, the files are correctly deleted.
-	KB94323	5.7.0	n/a	Issue: Installation of MA fails if the case-sensitive attribute is enabled. Resolution: If WSL is in use in the environment, confirm that both the installation folder and data directories aren't set to be case-sensitive before you install MA.

n/a - not applicable. Resolution doesn't require a product-specific solution.
Back to top

Related Information

For product documents, go to the Product Documentation portal.

For End of Life (EOL) information, see Product End of Life Information.
For EOL policy details, see the Corporate Products EOL policy.

Definitions:

EOL period—The time frame that runs from the day we announce product discontinuation, until the last date that we formally support the product. In general, after the EOL period is announced, no enhancements are made.
EOL date—The last day that the product is supported, according to the terms of our standard support offering.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Trellix Agent 5.7.x Known Issues

Environment

Summary

Related Information

Affected Products

Languages:

Title

Title

Knowledge Center

Trellix Agent 5.7.x Known Issues

Environment

Summary

Related Information

Affected Products

Languages:

Choose your region

Title

Title