McAfee Agent fails to calculate Distributed Repository hop distance
Last Modified: 2021-06-14 16:28:20 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
McAfee Agent fails to calculate Distributed Repository hop distance
Technical Articles ID:
KB87471
Last Modified: 2021-06-14 16:28:20 Etc/GMT EnvironmentProblem
The updates fail from either of the following, when the McAfee Agent policy is set to choose the repository based on Subnet distance:
The I #4284 imsite Found site name=McAfeeHttp I #4284 imsite Found site name=ePO_(DistributedRepository2) I #4284 imsite Found site name=ePO_(DistributedRepository3) .. I #4500 LstnSvr CAsyncSocket::DoAccept for event: FD_ACCEPT I #4516 LstnSvr 'GET' request received from Host: fe80::e8b7:8eac:66cc:3853%11:65400 I #4516 LstnSvr Cycle not detected. The request is from agent I #12888 imsite Traceroute using IP address failed. E #11540 imsite Error trace: E #11540 imsite [calculate subnet distance,ePO_(DistributedRepository1)]-> E #11540 imsite Tracing of (ePOServername) failed I #1224 Agent Forward all events request received I #4292 Agent Agent event wakeup, processing events i #4292 Agent Agent is looking for events to upload I #4292 Agent Agent did not find any events to upload .. I #4552 LstnSvr Cycle not detected. The request is from agent I #12888 imsite Traceroute using server name failed. Cause
Internet Control Message Protocol (ICMP) is disabled or blocked in the environment.
SolutionMake sure that ICMP is enabled on the firewall or proxy in your environment.
McAfee Agent requires IMCP to properly calculate the hops that an ICMP packet makes, while traversing the network.
Affected ProductsLanguages:This article is available in the following languages: |
|