MOVE AV Agentless 4.x (General) |
Reference
Number |
Related
Article |
Found
In |
Fixed
In |
Issue Description |
MOVEAGL-1838 |
- |
4.10.0 |
- |
Issue: The Malware Protection status shows as 'Off' in a new NSXT deployment environment or after migration from an NSXV environment.
Workaround: In ePO, update any existing policies in the Policy Catalog, enforce the policy, and do a wakeup agent. |
MOVEAGL-1834 |
- |
4.10.0 |
- |
Issue: There are bouncy castle-related messages in the stderr log files. You can ignore the errors as there's no functionality impact. |
MOVEAGL-1793 |
- |
4.10.0 |
- |
Issue: The following error displays during upgrade of the extension:
Dependent plug-in DC__XX__4000 failed with initialization error
Workaround: Refresh the ePO extension page, which removes this error message. |
MOVEAGL-1544 |
- |
4.9.1 |
- |
Issue: Restore of quarantined files belonging to a case-sensitive folder via Restore tool isn't working. |
MOVEAGL-1508 |
- |
4.9.1 |
- |
Issue: Quarantine mount fails when a case-sensitive folder is added as "Quarantine network share" path, and
displays an error.
Workaround: Don't use a case-sensitive folder as "Quarantine network share." |
MOVEAGL-1404 |
- |
4.8.0 |
4.9.0 |
Issue: General syslog logging isn't enabled by default in the SVM. |
MOVEAGL-1403 |
- |
4.8.0 |
4.9.0 |
Issue: After an upgrade, the MOVE events are no longer generated. This issue is seen when you upgrade the MOVE SVM using the Debian package. |
MOVEAGL-1422 |
- |
4.8.0 |
4.9.0 |
Issue: The default timeout setting of 30 seconds can lead to a file-truncate error.
Resolution: The Global Threat Intelligence default timeout is now set to 5 seconds. The setting is changed in the SVM Settings policy for both an upgrade and fresh install. |
MOVEAGL-1418 |
- |
- |
4.9.0 |
Issue: [Feature] The antimalware Scan Engine is upgraded to 6100 on the SVM. |
MOVEAGL-1419 |
- |
- |
4.9.0 |
Issue: [Feature] The Endpoint Security for Linux is upgraded to 10.7.0. This upgrade supports only Medium DATs on the SVM. |
1251642 |
- |
4.7.0 |
- |
Issue: MOVE General config page requires that the SVM Password ends with a number only. |
1235506 |
- |
4.7.0 |
- |
Issue: When the SVM Manager is upgraded, Static IP addresses aren't released to the IP address pool, which were assigned to the old SVM Manager. |
1232177 |
- |
4.7.0 |
- |
Issue: The MOVE AntiVirus Policy collection task is triggered even after you disable the Policy Collector. When the task is triggered, the server task log records fail. |
- |
- |
3.6.0 |
n/a |
Issue: TCP Port 445 port must be allowed in the Windows firewall rules. It's applied to client VMs for successful vShield Driver installation via the ePO Server. For details, see the MOVE AntiVirus 4.0.0 Product Guide. For documentation, see the "Related Information" section below. |
- |
- |
3.6.0 |
n/a |
Issue: Minimum cloud account rights needed for MOVE AL Security Virtual Appliance (SVA) deployment are defined in the Product Guide. For documentation, see the "Related Information" section below. |
|
Reference
Number |
Related
Article |
Found
In |
Fixed
In |
Issue Description |
MOVEAGL-1435 |
- |
- |
4.9.0
Hotfix
MOVEAGL-1441
(RTS) |
Issue: Security Tags aren't visible in the vCenter 7.0 web client user interface.
When you try to view the Security Tags page, the screen keeps trying to load, and doesn't show any assigned tags for the MOVE AL clients.
NOTE: The 'NSX Virus Found' tag and 'NSX Unprotected' tag continue to function. |
MOVEAGL-1434 |
- |
- |
4.9.0
Hotfix
MOVEAGL-1441
(RTS) |
Issue: In the browser, the 'Service Definitions' page isn't visible when you choose "HTML5 view" instead of "FLEX view."
From vCenter 7.0 and onward, VMware made "HTML view" a mandate to log on to the vCenter Web Client.
The following functions are lost:
- You can't manually remove the MOVE AV service.
- You're unable to edit the OVF URLs.
- You can't see all on-access policies that are reflected from ePO.
NOTE: There's impact on functionality.
|
MOVE-204 |
- |
4.8.0 |
4.8.1 |
Issue: A Connection Refused error occurs repeatedly when connected from the Mux process in the ESXi host. The mouse becomes intermittently unresponsive on a Windows 10 VM. The following error is seen:
- Source:vsepflt Event ID: 1 Level:Information Detail:Solution VM is disconnected
- Source:vsepflt Event ID: 1 Level:Information Detail:Solution VM is connected
|
1273628
1274460 |
- |
- |
4.8.1 |
Issue: MOVE SVM isn't localized and can't handle special characters present within exclusions; policy enforcement fails. |
MOVEAGL-1387 |
- |
4.8.0 |
4.8.1 |
Issue: [SVM] Multiple Servers incur performance issues and become unresponsive. The affected systems include MOVE clients, which include Windows Servers, Workstations, and Linux VMs. |
MOVEAGL-2 |
- |
4.7.0 |
4.8.1 |
Issue: Scanning unexpectedly continues on a Network File System mount, even after disabling the feature through the policy. |
1214115 |
- |
- |
4.5.1
Hotfix
1209808 |
Issue: SVA enters into a hung state. |
1213460 |
- |
- |
4.5.1
Hotfix
1209808 |
Issue: Virtual machines unexpectedly hang after a refresh or recompose. |
1209808 |
- |
- |
4.5.1
Hotfix
209808 |
Issue: High CPU usage by the MVSVC process on SVA. |
MOVEAGL-1402 |
- |
4.8.1 |
- |
Issue: The network scanning option for Linux clients in MOVE Agentless is currently restricted to SMBv1.0. This restriction is because VMware currently only supports SMB 1.0 for Windows-mounted shares on Linux clients. |
1184662 |
- |
4.5.1 |
- |
Issue: MOVE 4.5.1 Help extension doesn't upgrade or overwrite the previous versions of Help extension. The older Help extension versions (MOVE 4.0 and 4.5.0) remain checked in to ePO.
Workaround: Manually remove the previous Help Extension after checking in the New extension. |
1185131 |
- |
4.5.1 |
- |
Issue: Unable to check in the MOVE Agentless v4.5.1 Debian package directly to ePO Master Repository.
Workaround 1: Use Software Manager to check in the Agentless Debian Package.
Workaround 2: Change the upload limit value for ePO:
- Download the Debian package from the Software Manager and place in the local system or network location.
- Log on to the ePO Server system as Administrator user.
- Open the epo.properties file under C:\Program Files (x86)\McAfee\ePolicy Orchestrator\Server\conf\epo.
- Change the configured value of the file.upload.limit setting to 300 in the epo.properties file.
- Restart the ePO Application server service.
- Check in the Debian package to the Master Repository from the location where it's placed.
|
1187210 |
- |
4.5.1 |
- |
Issue: You see the following when you create and apply an exclusion to a non-existent path. The action results in the exclusion not being immediately applied to the path when it's created.
Workaround: The exclusion is reapplied every 30 minutes. Allow the exclusion application cycle to complete and the path exclusion must be applied. |
1187205 |
- |
4.5.1 |
- |
Issue: Security tags stop working when the vCenter account is deleted and then readded.
Workaround:
Update NSX_REG_VC_ID back to the original one in DB table DC_AL_NSX_MANAGER_DETAILS.
- Add the vCenter account back to the registered cloud account page.
- Connect to SQL Management Studio.
- Run the SQL query "select * from MDCC_ACCOUNT" and determine the vCenter account that was deleted earlier.
- Note the corresponding value from the AUTO_ID column.
- Edit the DC_AL_NSX__MANAGER_DETAILS table and update the NSX_REG_VC_ID column. Update the column with the previously copied AUTO_ID value against the VMware NSX Manager, which is mapped to the previously deleted vCenter.
- Save.
|
1187801 |
KB93582 |
4.5.1 |
- |
Issue: Communication between ePO and the MOVE service manager in NSX breaks when ePO is upgraded.
Workaround: See the Related article for details. |
1175601 |
- |
4.0.0 |
- |
Issue: Unable to use a password with 17 or more characters to authenticate with NSX Manager. |
1171929 |
- |
4.5.0 |
- |
Issue: Files with a file name longer than 255 characters, when excluded using Path Exclusions, aren't excluded from a scan.
Workaround: Make sure that the file names don't exceed 250 characters. |
1169338 |
- |
4.0.0 |
4.5.0 |
Issue: After successfully adding the username for the Hypervisor/vCenter Server and saving, the backslash (\) is removed from the provided credentials. |
1165310 |
- |
4.0.0 |
4.5.0 |
Issue: Exclusions can be truncated, not saved, or both. This issue is seen when adding to a MOVE AV AntiVirus 4.0 policy and clicking Save. |
1146357 |
- |
4.0.0 |
- |
Issue: After you migrate the Server settings, data is set to the default values after 60 minutes. |
1142185 |
- |
4.0.0 |
- |
Issue: In the Threat Event Log, the network path for a file isn't displayed completely. |
1142297 |
- |
4.0.0
|
- |
Issue: After a successful migration, the certificate details of the target NSX Manager are overwritten with the certificate details of the source NSX Manager. This issue occurs because of the coexistence of both 3.x and 4.0 extensions.
Workaround: Re-register the NSX certificate. |
1071402 1082087 |
- |
3.6.1 |
- |
Issue: When either a MOVE Agentless Service registration or de-registration action is completed, the page control switches to the OVF Repository page. But, when the Service upgrade either fails or completes successfully, the page control must remain on the Service, NSX page. The page must be displayed so that the administrator can know whether the action has failed or completed. This issue is only intermittently reproduced when the ePO Console is started from a Chrome browser.
Workaround: To view the status of the Service registration, click back to the Service, NSX page. |
1073146 |
- |
3.6.0 |
- |
Issue: After you check in the MOVE-AV-AL_3.6.x.zip file from the Menu, Configuration, SVA Repository page, the control incorrectly stays on the "Check-in SVA (zip) file" page, instead of going to the "SVA Repository" page. This issue is only intermittently reproduced.
IMPORTANT: This issue doesn't affect the product; it's only a cosmetic issue. |
1017699 |
- |
3.6.0 |
- |
Issue: The mandatory sign '*' for the Configuration, General page doesn't appear while traversing back and forth through different tabs.
Workaround: Click the MOVE AV Agentless button again and the "*" sign is visible. |
1033401 |
- |
3.6.0 |
- |
Issue: Multiple SVAs are displayed in the "MOVE AV [Agentless]: Licensing information" report when only one SVA is active.
Or, if different hosts have SVAs with the same name, the "MOVE AV [Agentless]: Licensing information" query shows only one SVA.
Workaround: Delete the old MOVE AV Agentless SVA from the hosts and rerun the Server Task; the correct data is displayed. |
MOVE AV Agentless (Expected Behavior) |
Reference
Number |
Related Article |
Found
In |
Fixed
In |
Issue Description |
1142298 |
- |
4.0.0 |
n/a |
Issue: After the data migration is complete, old policies need to be deleted and new ones reassigned in the NSX Console. This issue is seen with MOVE Agentless 4.0 because of the coexistence of 3.x and 4.0 extensions.
Workaround: Post migration, delete the earlier 3.x policies and create ones in the NSX console. |
1142300 |
- |
4.0.0 |
n/a |
Issue: You observe the following after you upgrade the extension and migrate data from 3.6.1 to 4.0.
The NSX page continues to show that the NSX Manager is registered to the 3.6.1 SVA.
NOTE: This issue is cosmetic and there are no plans to fix this issue. |
1143059 |
- |
4.0.0 |
n/a |
Issue: Path exclusions provided with Windows system variables in the unified MOVE Agentless and Multi-Platform policy are only applicable to MOVE Multi-Platform.
Examples of Windows variables: %windir%, %temp% |
931701 |
- |
3.5.0 |
n/a |
Issue: If the VMware Endpoint isn't deployed on the host, the vCenter console shows deployment as failed but the SVA is deployed.
Solution: Deploy a VMware endpoint to the host. |
1081226 |
- |
3.6.0 |
n/a |
Issue: You observe the following after you log on to ePO, and navigate to the MOVE AV Agentless Service, NSX Manager page, and click the Unregister link.
The Upgrade link disappears when an unregister attempt fails.
Resolution: You must follow the exact steps to correctly unregister or clean up the environment as documented in the MOVE AV AntiVirus 4.0.0 Product Guide. |
- |
- |
3.6.0 |
n/a |
Issue: The SVA deployment Status isn't reflected correctly in the MOVE AV Agentless, Service Tab. The issue is seen immediately after an SVA deployment or removal.
The SVA Deployment Status depends on the vSphere Account Sync. The latest data is not displayed until the account is synced.
Workaround: Before starting any SVA Deployment/Upgrade/Removal using ePO, sync all vCenter accounts so that SVA Deployment Status has accurate data. |
1025438 |
- |
3.6.0 |
n/a |
Issue: Previous and Next buttons don't work on the MOVE AV Agentless, Task details page.
Workaround: The user can click the back option, and click the Job individually, to go to the corresponding task details page. |
- |
- |
3.6.0 |
n/a |
Issue: SVA deployment via ePO fails on ESXi hosts that don't have client VMs running.
Resolution: For SVA deployment via ePO to be successful, the administrator must make sure that there's at least one client VM running on the ESXi host. |
- |
- |
3.6.0 |
n/a |
Issue: vShield driver deployment on the guest VM fails when deploying using ePO Server.
Resolution: When the installation of the VMware Tools VMCI vShield Driver fails on VMs, make sure that the VMs are part of domain. The domains must be registered in ePO with domain administrator credentials, and ePO can resolve the FQDN of these VMs. |
931718 |
- |
3.0.0 |
n/a |
Issue: If the static IP address pool is exhausted, vCenter console displays deployment as failed. But, the SVA is deployed and a DHCP IP address is assigned.
Workaround: Make sure that you've created the needed static IP address pool, if you don't use the DHCP option. For more details about how to configure the network and IP address range by using NSX Manager and vSphere Web Client, see the NSX Administration Guide.
|
MOVE AV Agentless 4.x (PER) |
Reference Number |
Related
Article |
Found
In |
Fixed
In
|
Issue Description |
1049253 |
- |
3.6.0 |
- |
Issue: MOVE Agentless 4.x Security Virtual Appliance deployment task fails when there are no VMs present in the ESXi Host. |