在空间隙环境中,DAT 或 AMCore 内容更新失败
Last Modified: 2023-02-13 14:15:46 Etc/GMT
Disclaimer
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
在空间隙环境中,DAT 或 AMCore 内容更新失败
Technical Articles ID:
KB92631
Last Modified: 2023-02-13 14:15:46 Etc/GMT Environment
McAfee Endpoint Security (ENS)威胁防护 10.x McAfee Agent 5.x Problem在具有独立连接性的空中有空隙的环境中,DAT 或
<timestamp> masvc(1336.1380) Updater.Info: Updater engine is spawned successfully. ... <timestamp> masvc(1336.1380) compatservice.Info: is_compat_running: 1, is_compat_required: 1 <timestamp> masvc(1336.1380) msgbus.Info: QueryFullProcessImageName C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe <timestamp> masvc(1336.1380) msgbus.Info: verify code signature returns <-2146762486>, GetLastError <-2146762486>. <timestamp> masvc(1336.1380) msgbus.Warning: Allowing <C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe(11924)> limited access onto msgbus ... <time and date> I #22504 ScrptExe Running "C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe" /LPCPUID=AMCORE__2000:8980_3429152929:0001 <time and date> I #22504 ScrptExe Did not match searched path <time and date> I #22504 ScrptExe Executing "C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe" /LPCPUID=AMCORE__2000:8980_3429152929:0001 <time and date> I #22504 ScrptExe Executing "C:\Program Files\Common Files\McAfee\Engine\AMCoreUpdater\amupdate.exe" /LPCPUID=AMCORE__2000:8980_3429152929:0001 /INITEVENT=NOTIFY_INIT_{BE8DA76F-04E1-4A87-B836-7D7C80147DA9} /DEINITEVENT=NOTIFY_DEINIT_{547A6F47-DA98-48B7-A55C-4541D9B1605F} ... <time and date> I #22504 UpdatePlugin Initializing update plugin: AMCORE__2000:8980_3429152929:0001 <time and date> I #22504 UpdatePlugin Creating instance of LPC updater callback interface <time and date> I #22504 UpdatePlugin Successfully created updater callback LPC interface ... <time and date> E #22504 UpdatePlugin LPCException occurred in MfeUpdatePluginWrapper::setProductInfo() <time and date> I #22504 ScrptExe Failed to set the product information. Setting SetMcShieldClientdll to FALSE ... <time and date> E #22504 ScrptExe [DeinitSignalApp]-> <time and date> E #22504 ScrptExe Could not deinitialize the process with id - AMCORE__2000:8980_3429152929:0001 as no such process exists <time and date> I #22504 ScrptExe Executing section: [LatestAlreadyInstalled] <time and date> I #22504 ScrptMgr Product(s) running the latest AMCore. 内容更新过程完成报告无法找到新内容。因此,内容仍保留在当前安装的版本中。 此外,如果您使用与进程监视器相同的工具跟踪更新尝试,则可以 重新启动不会纠正问题。 漏洞利用防护内容可能仍会成功更新。 System Change
系统和 ePO 服务器位于空中有空隙的环境中。或者,旧版本的ENS产品,最初已发布多年,最近已被新安装。
CauseSolution此外,请确保已安装系统上所需的 root 证书。有关说明,请参阅 KB91697-如何更新您的 root 证书颁发机构,以获得 McAfee 产品安装和升级成功。 DisclaimerThe content of this article originated in English. If there are differences between the English content and its translation, the English content is always the most accurate. Some of this content has been provided using Machine Translation translated by Microsoft.
Affected ProductsLanguages:This article is available in the following languages: |
|