McAfeeePolicyOrchestrator(4)

NOTE:HostingtheSQLdatabasefilesonWindowsmountpointsisincreasinginpopularityamongSQLadministrators.ThedefaultdiskspacechecksthattheMcAfeeePOinstallerleveragescannotaccuratelydetectavailablespaceonmountpoints;forthisreasonit’snecessarytouseaninstallationswitchtobypassthecheck.

-->

TheMcAfeeAgentistheclient-sidesoftwarethatfacilitatesmanagementofendpoints.Agent-servercommunicationisthemethodbywhichsystempropertiesareuploadedtotheserverandnewpoliciesandclienttasksarerequested.Whenagent-servercommunicationinterval(ASCI)fails,thesystemisessentiallyunmanaged.

NOTE:McAfeeAgent5.xlogsimportantASCIinformationinmasvc_systemname.log.FordetailedinformationonAgentloglocationsincludingnon-Windowsplatforms,seeKB82170.

IftheASCIfailsbetweentheclient(MA)andtheserver(McAfeeePO),reviewthelogsfromeach.UseKB90603forinstructionsonhowtoreadthelogs.

CommonlyencounteredproblemswithASCI:

Howtotroubleshootagent-servercommunicationfailuresinMcAfeeAgent5.xincludesmanymorecommoncausesandsolutionsforagent-servercommunicationfailures.

WhennavigatingortakingactionintheMcAfeeePOconsoleisslow,thereareseveralsimplebutcriticalcheckstoverify:

NOTE:Theminimumrequirementsdetailedindocumentationarejustthat—minimum.Dependingonenvironmentsizeandcomplexityornumberofproductsinstalledandmanaged,yourMcAfeeePOorSQLservermightneedtobesignificantlymorepowerfulthantheminimumrequirements.

Beyondtheseinitialchecks,troubleshootingaMcAfeeePOconsoleperformanceissuecanbeadauntingtask,andwilllikelyinvolvecontactingMcAfeeTechnicalSupport.IftheadministratoriscomfortableworkingwithSQLqueries,seeKB90786(loginrequired)foradvancedtroubleshootinganddatacollectiontechniques,includingidentifyingthecauseofSQLblockingandenablingtheconfigurationnecessarytotrackSQLdeadlockissues.

Distributedrepositoriesareusedtoprovideadditionalsourcesforclientstoreceivebothcontentupdates(.DATs)andproductdeployments.Whenrepositoryreplicationfailsonaconsistentbasis,theimpactedrepositoriesdonotmatchtheMcAfeeePOMasterRepository.Asafailsafemechanism,updateattemptsfromsaidrepositoryareblockedandfail.

McAfeeePOcontainsadefaultAutomaticResponsethatcanbeconfiguredtoalerttheadministratorviaemailifareplicationfails:“DistributedRepositoryReplicationfails.”Iftheadministratorbecomesawareofrepeatedfailurestoreplicatetoaspecificrepository,actionmustbetakentoremediate.

Initialstepstobegintroubleshootingareplicationfailure:

McAfeeePOlogsdetailedinformationaboutrepositoryreplication,includingcriticalfailuremessages,intheePOAPSvr_servername.log,locatedintheePO_install_dir\DB\Logsdirectory.MorecompleteinformationregardingePOserverlogsislocatedintheMcAfeeePO5.10LogFileReferenceGuide.

Commoncausesofrepositoryreplicationfailuresinclude:

McAfeeePOincludesaninternal,hiddenservertaskcalledthedbcleantask,whichisresponsibleforterminatingtasksthathavereachedtheirexpirationtime.Thereareseveralcommonissueswiththedbcleantaskthatcanleadtothesamesymptom,suchasmanyServerTasksrunningindefinitelyorfarpasttheirstandardexpirationtime.

NOTE:TheoneexceptiontotheaboveisRunClientTaskNow.Thesetasksfunctiondifferentlythanotherservertasks—namely,theyaredependentonreceivingaDataChannelmessagefromtheendpointtoreportonstatus.Ifthismessagefailstobesentorreceived,thetaskscanstayinprogressuntiltheMcAfeeePOApplicationServerserviceisrestarted.Fordetailsonwhatthislookslikeandwhyithappens,seeKB85013.

NOTE:WhileKB83384listsMcAfeeePO5.1.2and5.3.1ashavingresolvedthisproblem,thatreferstoonlyonepotentialcauseofthedbcleantaskbecominginactive.Iftheproblemsanadministratorisexperiencingmatchthesymptomsdescribedinthearticle,it’sstillworthcheckingthestatusofthedbcleantaskviatheSQLquerieslisted.

TheSoftwareManager(rebrandedasSoftwareCataloginMcAfeeePO5.10andhigher)facilitatesproductdownloadsandupdates.ItrequiresanunobstructedconnectiontothreeMcAfeehostedsitesoverport443todownloadtheinstallers,updates,andextensionslisted:

ForafulllistofportsrequiredbyMcAfeeePOanditscorecomponents,seeKB66797.

NOTE:NoteveryreleaseislistedintheSoftwareManager.OftennewreleasesarepostedonlytotheProductDownloadssiteuntilpublishedatalaterdatetotheSoftwareManager.Contactsupportifpackagesareexpectedtobelistedbutdonotappearordownloadsfail,butnotifthepackagehassimplyneverbeenpostedtotheSoftwareManager.

GeneraltipsforSoftwareManagernavigationandusagearedescribedinKB71608,includingdescriptionsofeasilymisunderstoodUIbehavior.MostofthesequirkshavebeenaddressedinMcAfeeePO5.10.

IftheSoftwareManagerisblankordisplaysanerrorsuchas“TheProductCataloghasnotbeendownloadedyet,”thecertificateusedtosecurelyconnecttotheMcAfeebackendservermayhavefailedtodownload.Foralinktodownloadthecertificateandstepstoimportitmanually,seeKB74029.

WhenasinglesystemisdisplayedmultipletimesintheMcAfeeePOSystemTree,itisconsideredaduplicatesystem.Thereareseveralreasonsforduplicatesystems—somelegitimate,somenot.

Thefirststepwhenlookingintotherootcauseofaduplicatesystemsissueistodetermineiftheduplicateentriesaremanagedorunmanaged.Unmanagedentrieshavenosystemdetails—forexample,noGUID,IPaddress,etc.

NOTE:UnmanagedduplicatesaremostcommonlycausedbyanADSync,especiallyinMcAfeeePO5.3.3and5.9.0mcafee 8.8 patch 9,whichhaveaknownissuethatisresolvedinMcAfeeePO5.9.1.

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-120294-4.html