Performance issues seen in the ePO console, systems reporting to blank handler, system properties aren't updated
Last Modified: 2023-07-26 10:43:59 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Performance issues seen in the ePO console, systems reporting to blank handler, system properties aren't updated
Technical Articles ID:
KB91014
Last Modified: 2023-07-26 10:43:59 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.0, 5.10 Update 1–8
Problem 1
You observe the following at the ePO console:
Other computer properties on the client system, which have changed since the last successful ASCI, might not get updated. Some examples might include the IP address or MAC address. But, the issue can occur with any of the computer properties. Problem 2
When you navigate to the AH page, the "
Problem 3
The To confirm the NOTE: For help with the above query, see KB67591 - How to run a SQL script provided by Technical Support against the ePolicy Orchestrator database. Cause
A design change implemented in ePO 5.10 uses When an ASCI completes, the properties are first written to the When an invalid value for an IP address or IPV4 address is written to
SolutionThis issue is resolved in ePO 5.10.0 Update 9, which is available from the Product Downloads site.
NOTE: You need a valid Grant Number to access the update. To view other known and resolved issues, see KB90382 - ePolicy Orchestrator 5.10.x Known Issues. Workaround
This workaround temporarily alleviates the symptoms, but the issue might return at any arbitrary time in the future. Use the following query to determine if you have one or more invalid IP addresses in the where PropValue like '%:%' and PropValue like '%.%' and (Propkey = 'IPAddress' or PropKey = 'IPv6') If the query returns one or more results, use this query to remove the invalid entries, which allow the staging table to be purged: where PropValue like '%:%' and PropValue like '%.%' and (Propkey = 'IPAddress' or PropKey = 'IPv6') Affected ProductsLanguages:This article is available in the following languages: |
|