Follow the relevant procedure below.
Use ePolicy Orchestrator (ePO) to update to Scan Engine 6200.9189:
Use an ePO Endpoint Deployment Kit (EEDK) to update to Scan Engine 6200.9189 with ENSLTP.
- Download the ENSLTP EEDK file from the "Attachment" section of this article. The name of the file is ENSLEEDK6200.zip.
- Log on to the ePO console.
- Go to Master Repository, and click Check In Package.
- Click Browse and select the file that you downloaded in Step 1. Click Next and Save to check in the EEDK file.
- Go to System Tree and select the group or client system. Create a product deployment task to update the Engine to 6200 and push it to the clients.
- Wait for the deployment task to complete. Check the Engine version details in the ENSLTP version details.
- For ENSLTP 10.6.6 and later, execute the following command:
/opt/McAfee/ens/tp/bin/mfetpcli --v
- For ENSLTP 10.6.5 and earlier, execute the following command:
/opt/isec/ens/threatprevention/bin/isecav --v
- Go to System Tree and select the group or client system. Click Wake Up Agents. This step makes sure to get the updated Engine version reflected in the ePO product properties.
Manually update to Scan Engine 6200.9189:
Use the following steps to update to Scan Engine 6200.9189 on a standalone system (unmanaged system) with ENSLTP.
- Download the ENSLTP EEDK file from the "Attachment" section of this article. The name of the file is ENSLEEDK6200.zip.
- Extract ENSLEEDK6200.zip.
- Check the installed ENSLTP version.
- For ENSLTP 10.6.6 and later, execute the following command:
/opt/McAfee/ens/tp/bin/mfetpcli --v
- For ENSLTP 10.6.5 and earlier, execute the following command:
/opt/isec/ens/threatprevention/bin/isecav --v
- Set the Engine paths and prefs.xml path for the installed ENSLTP version from the table below:
ENGINE_PATH_32_BIT
ENGINE_PATH_64_BIT
DEFAULT_PREFS_PATH
RUNTIME_PREFS_PATH
Installed ENSLTP Version |
32-bit Engine Path
(ENGINE_PATH_
32_BIT) |
64-bit Engine Path
(ENGINE_PATH_
64_BIT) |
Default Prefs.xml Path
(DEFAULT_PREFS
_PATH) |
Runtime Prefs.xml Path
(RUNTIME_PREFS
_PATH) |
If 10.6.5 or earlier |
/opt/isec/ens/
threatprevention/
var/engine/lib32 |
/opt/isec/ens/
threatprevention/
var/engine/lib |
/opt/isec/ens/
threatprevention/
var/etc/prefs.xml |
/opt/isec/ens/
threatprevention/
var/prefs.xml |
If between 10.6.6 and 10.6.10 (both inclusive) |
/var/McAfee/ens/
tp/engine/
lib/32 |
/var/McAfee/ens/
tp/engine/lib/64 |
/opt/McAfee/ens/
tp/etc/prefs.xml |
/var/McAfee/ens/
tp/prefs.xml |
If 10.6.11 or later |
/opt/McAfee/ens/
tp/var/
engine/lib/32 |
/opt/McAfee/ens/
tp/var/engine/lib/64 |
/opt/McAfee/ens/
tp/etc/prefs.xml |
/var/McAfee/ens/
tp/prefs.xml |
- Stop the ENSLTP services.
- For ENSLTP 10.6.6 and later, execute the following command:
/opt/McAfee/ens/tp/init/mfetpd-control.sh stop
- For ENSLTP 10.6.5 and earlier, execute the following command:
/opt/isec/ens/threatprevention/bin/isectpdControl.sh stop
- Create a 64-bit Engine folder (6200.9189) in the 64-bit Engine path (see step 4). Execute the following command:
mkdir -p ${ENGINE_PATH_64_BIT}/6200.9189
- Untar the 64-bit Engine file sl646200.tar into a temporary directory. Copy av_sdk/signlic.txt and av_sdk/lib/* to the 64-bit Engine folder (6200.9189) created in the previous step.
- Set permissions for the folders by executing the following commands:
chmod 700 ${ENGINE_PATH_64_BIT}/6200.9189
chmod 600 ${ENGINE_PATH_64_BIT}/6200.9189/*
- Create a 32-bit Engine folder (6200.9189) in the 32-bit Engine path (see step 4). Execute the following command:
mkdir -p ${ENGINE_PATH_32_BIT}/6200.9189
- Untar the 32-bit Engine file slp46200.tar into a temporary directory. Copy av_sdk/lib/config.dat, av_sdk/lib/liblnxfv.so, av_sdk/lib/liblnxfv.so.4, and av_sdk/signlic.txt to the 32-bit Engine folder (6200.9189) created in the previous step.
- Set permissions for the folders by executing the following commands:
chmod 700 ${ENGINE_PATH_32_BIT}/6200.9189
chmod 600 ${ENGINE_PATH_32_BIT}/6200.9189/*
- Create an Engine symlink.
- Go to the 64-bit Engine directory. Execute the following command:
cd ${ENGINE_PATH_64_BIT}/6200.9189
- Create a symlink. Execute the following command:
ln -sf liblnxfv.so.4 liblnxfv.so
- Go to the 32-bit Engine directory. Execute the following command:
cd ${ENGINE_PATH_32_BIT}/6200.9189
- Create a symlink. Execute the following command:
ln -sf liblnxfv.so.4 liblnxfv.so
- Take a backup of the runtime and default prefs.xml files before proceeding to update these files.
- Update both the runtime and default prefs.xml files with the 6200 Engine version. Execute the following commands:
sed -i "s:<MajorEngineVersion>.*</MajorEngineVersion>:<MajorEngineVersion>6200</MajorEngineVersion>:g" ${RUNTIME_PREFS_PATH}
sed -i "s:<MinorEngineVersion>.*</MinorEngineVersion>:<MinorEngineVersion>9189</MinorEngineVersion>:g" ${RUNTIME_PREFS_PATH}
sed -i "s:<IncrementalUpdateEngineVersion>.*</IncrementalUpdateEngineVersion>:<IncrementalUpdateEngineVersion>6200.9189</IncrementalUpdateEngineVersion>:g" ${RUNTIME_PREFS_PATH}
sed -i "s:<MajorEngineVersion>.*</MajorEngineVersion>:<MajorEngineVersion>6200</MajorEngineVersion>:g" ${DEFAULT_PREFS_PATH}
sed -i "s:<MinorEngineVersion>.*</MinorEngineVersion>:<MinorEngineVersion>9189</MinorEngineVersion>:g" ${DEFAULT_PREFS_PATH}
sed -i "s:<IncrementalUpdateEngineVersion>.*</IncrementalUpdateEngineVersion>:<IncrementalUpdateEngineVersion>6200.9189</IncrementalUpdateEngineVersion>:g" ${DEFAULT_PREFS_PATH}
- Remove the older 64-bit and 32-bit Engine directory.
- Start the ENSLTP services and check the updated Engine version details.
- For ENSLTP 10.6.6 and later, execute the following command:
/opt/McAfee/ens/tp/init/mfetpd-control.sh start
- For ENSLTP 10.6.5 and earlier, execute the following command:
/opt/isec/ens/threatprevention/bin/isectpdControl.sh start