此问题可能会影响安装在任何指定端点上的几种产品。可出现以下几种症状,例如:
- 产品属性报告不正确或缺少 (未知) 回 ePolicy Orchestrator (ePO) 服务器。
- 策略可能无法应用于某些托管节点。
- 本地 ENS 控制台可能无法正确加载,并显示错误,例如 "加载设置时发生错误。"
- DAT ( AMCore )版本可能不会更新,并且计算机可能会保留在过时的 DAT 版本上。
McAfee Agent日志和产品特定的日志记录部分失败。 下面是 McAfee Agent 与 Data Exchange Layer 和 ENS 通信失败的日志片段示例:
macompatsvc_<system name>
.log从:
<time and date> macompatsvc(2888.4868) LpcConnMgr.Info: Processing health check request
<time and date> macompatsvc(2888.4340) cmasvc.Info: Application DXL_____1000 is installed.
<time and date> macompatsvc(2888.4340) cmasvc.Error: Insufficient information about the application DXL_____1000.
<time and date> macompatsvc(2888.4340) cmasvc.Error: Manageability client creation failed for the application DXL_____1000.
...
<time and date> macompatsvc(2888.4340) cmasvc.Info: Application ENDP_AM_1070 is installed.
<time and date> macompatsvc(2888.4868) LpcConnMgr.Info: Processing health check request
<time and date> macompatsvc(2888.4340) cmasvc.Error: Insufficient information about the application ENDP_AM_1070.
<time and date> macompatsvc(2888.4340) cmasvc.Error: Manageability client creation failed for the application ENDP_AM_1070.
此外,
EndpointSecurityPlatform_Errors.log 可能会记录与以下错误类似的错误:
<time and date> |Error |McTray |McTray 8692| 8936|McTrayUPC dllmain.cpp(555) Endpoint Security Platform is not running!
<time and date> |Error |McTray |McTray 8692| 8936|McTrayUPC dllmain.cpp(514) SubscribeToBoAvailableEvent failed: boName: COMBO, error: 80000100
<time and date> |Error |McTray |McTray 8692| 8936|McTrayUPC TechnologyTopicHandler.cpp(152) | CheckTechnologyState failed to get technology status from BO: AMSI
<time and date> |Error |McTray |McTray 8692| 8936|McTrayUPC TechnologyTopicHandler.cpp(217) | AMSI is not responding.
<time and date> |Error |McTray |McTray 8692| 8936|McTrayUPC TechnologyTopicHandler.cpp(152) | CheckTechnologyState failed to get technology status from BO: ATP
ENS 组件密钥组件可以按相同原因报告运行/启动失败。记录的时间戳应关联。