McAfeeePolicyOrchestrator(5)

ManagedduplicatesmostoftenarisefromasituationwhereMcAfeeePOreceivespropertiesfromamanagedendpointandisunabletoassociateitwithanexistingentryintheSystemTree.Inotherwords,McAfeeePObelievesthesystemtobenew.Inthestandard(non-VDImode)configuration,McAfeeePOusestheAgentGUIDandMACAddresstoidentifyexistingmachines,soa/forceinstalloftheAgentcanleadtoanewGUIDbeinggenerated,andpotentiallyanewduplicatesystementry.

NOTE:Iftheadministratorcan“checkbox”oneofthemanagedduplicateSystemTreeentriesandmorethanoneoftheduplicateentriesareselected,thisindicatesthatthereisn’taduplicatesystematall.Instead,McAfeeePOisforcedtospreadasinglesystem’spropertiesacrossmultiplerowsbecauseofanunexpectedlyduplicatedproperty.Forexample,ifMcAfeeVirusScanEnterprise8.8Patch8and9arebothinstalledandreportingatthesametime.Toisolatewhatpropertyisatfault,resetthecolumnviewtodefault(Actions–ChooseColumns–UseDefault).

TheMasterRepositoryPullservertaskisacriticaldefaultactionthatisresponsiblefordownloadingcontentupdates(.DATs,etc.)fromMcAfee-hostedsourcesites(McAfeeHTTP)andcheckingitintotheMasterRepositoryonaregularinterval.

Likedistributedrepositoryreplication,rarefailureisrelativelynormal—forexample,ifthebackendsourcesiteisbeingreplicatedtoduringthetimeoftheadministrator’srepositorypull,thetaskcanfail.ItisconsideredabestpracticetoscheduletheMasterRepositorypulltorunmultipletimesthroughoutthedaytolessentheimpactofasinglefailure.Ifthenextpullsucceeds,.DATdeploymentintheenvironmentisdelayedonlyanhour,forexample,insteadofanentireday.

MasterRepositoryfacts:

Intherareeventofafailedrepositorypullleadingtorepositorycorruption(unabletoviewpackageslistedintheMasterRepositorypage,forexample),considerrebuildingtheMasterRepository.

NOTE:Rebuildingtherepositoryremovesallcontentfilesandinstallerpackages.PoliciesandclienttasksarenotimpactedbecausethisdataisstoredintheMcAfeeePOdatabaseandtiedtoextensions,nottherepository.Itwillbenecessary,though,toreplicatetoalldistributedrepositoriesaftercompletingarepositoryrebuild.

IftheadministratorhaschosentoinstallMcAfeeePOinanair-gappedenvironment,oronewithoutaccesstoourpublicrepositoryontheweb,itmaybenecessarytoconfigureMcAfeeePOtoupdatefromanotherinternalserver.

AnothercommonlyrequestedconfigurationisallowingclientmachinestoupdatefromanyMcAfeeePOserverintheenvironment.Toaccomplishthis,it’snecessarytosharethemasterrepositorykeysacrossanyMcAfeeePOserversinstalledintheenvironment.

McAfeeePOusestheMACaddressofaclientmachineasasecondarymatchingmechanism—inotherwords,iftheAgentGUIDhaschanged,theMcAfeeePOservercancheckexistingSystemTreeentriesfortheclient’sMACaddressandassociatetheincomingpropertieswiththatentry.IfboththeGUIDandMACAddressarenotfoundintheMcAfeeePOdatabase,abrand-newSystemTreeentryiscreated.

IfmachinesarelegitimatelyreportingthesameMACaddress(forexample,whencommunicatingoveraVPNconcentratororwhendeployedfromaHypervisorconfiguredtoassignthesameMAC),itisundesirableforMcAfeeePOtousetheMACaddressformatchingpurposes.Thiscanbedisabledentirely(thoughitisnotrecommended)ordonesoonanOUI-basis,asdescribedinKB52949.

NOTE:ExcludingaMACOUIfrombeingusedformatchingpurposesdoesnotstopaMACaddressfrombeingdisplayedmultipletimes(duplicated)asapropertyintheSystemTree.TheMcAfeeAgentcollectsinformationabouttheinstalledMACaddressandreportsittoMcAfeeePO;thisisexpectedinanenvironmentwheremultiplemachineshavethesameMACaddress.

DuplicatedMACaddressescanleadtoissuesthatareoftentheexactoppositeofaduplicatesystemsissue.Systemscanappearto“disappear”fromtheSystemTree,despitetheAuditLognotrecordinganymentionofthemachinebeingdeleted.

StartingwithMcAfeeePO5.10,itispossibletoaddnecessaryMACexclusionsthroughtheconsoledirectly,whereaspreviouslyitrequireddirectSQLaccess.LeveragethenewAddVirtualMACVendorpageinMcAfeeePOServerSettings.

TheMcAfeeePOconsole,hostedbytheMcAfeeePOApplicationServerservice(Tomcat),istheportalthroughwhichallmanagementfeaturesarepossible.Ifaccesstotheconsoleisimpossible,soismanagementoftheenvironment.

NOTE:Iftheconsoleisdown,unlesstheothercomponentsofMcAfeeePO(forexample,theMcAfeeePOServerservice)arealsononfunctional,clientmachineswillcontinuetocommunicate,sendeventsandproperties,andupdatetheircontentifavailable.

Commonandeasilyresolvableissueswithconsoleaccessaretypicallyrelatedtothebrowserandinclude:

Troubleshootingmorecomplexconsoleissuesoftencomesdowntooneoftwoscenarios:

BothscenariosarecoveredinKB81737,thoughformoredetailedinformationontroubleshootingadatabaseconnectionissue,refertotheDatabaseConnectionIssuessection.

IftheadministratorcompletesaDisasterRecoveryprocessandisgreetedbydependencyerrors,seeKB81754.

ApersistentandresponsiveconnectiontotheSQLdatabaseiscriticalforallMcAfeeePOserverandAgentHandler(s)functionality.

NOTE:McAfeeePOBestPracticesdefinetherequiredconnectionspeedbetweenahandler(includingMcAfeeePO)andthedatabasetobelessthan10ms,roundtrip.Iftherequiredspeedisn’tpossible,thedatabaseorhandlersmustbemovedtoaccommodate;otherwise,severelynegativeperformanceimpactswilloccur.

MostdatabaseconnectionproblemscanberesolvedbytheMcAfeeePOadministratorwithabasiclevelofSQLknowledge.Commonissuesinclude:

NOTE:ThemosteffectivewaytoverifybasicSQLconnectivityistouseatest.udlfile.Thebenefitoftest.udlisthatitexistsoutsideoftheframeworkofMcAfeeePOandcanbeusedtodemonstrateifMcAfeeePOisexperiencingasoftwareproblemmcafee 8.8 patch 9,orifthedatabaseconnectionissueexistsattheSQL(ornetwork)level.policiesandclienttasks.

本文来自电脑杂谈，转载请注明本文网址：
http://www.pc-fly.com/a/jisuanjixue/article-120294-5.html