Compliance data doesn’t appear in queries or the System Tree
Last Modified: 2022-01-11 17:07:58 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Compliance data doesn’t appear in queries or the System Tree
Technical Articles ID:
KB90574
Last Modified: 2022-01-11 17:07:58 Etc/GMT Environment
Endpoint Security (ENS) Firewall 10.x extension ENS Threat Prevention 10.x extension ENS Web Control 10.x extension Problem
When you remove the ENS extensions, compliance data is also removed. The data no longer appears in the ePolicy Orchestrator (ePO) System Tree or in compliance queries for ENS.
System Change
The ENS extensions are removed and rechecked into the ePO Server Extensions.
Cause
The extension removes the compliance data from the ePO database. The McAfee Agent sends an incremental props file only when the properties change on the client system. So, the compliant field and DAT version field are blank until they’re updated in the database. The update occurs when a new value is communicated from the endpoint. The DAT value would be updated on the next DAT update. The compliance value doesn’t change unless the system becomes uncompliant. So, you must send an agent wake-up call to have the correct data uploaded to the database.
Solution
Send an agent wake-up call from ePO or schedule it as an assigned client task to have the McAfee Agent send a full property package to ePO. NOTE: You must select the option Affected ProductsLanguages:This article is available in the following languages: |
|