Epo Agent not connecting / registering on Epo Server 1

[lorrscan]

Hello,

I have a problem with a number of systems not showing up on our Epo server console. The machines are updating to the latest dat's from the server but the machine names and properties are not being diplayed on the server console. The problem seems to be happening to our new laptops, which leads me to believe that we may have missed a setting while building the image for these laptops. Has anyone had this problem before?

Thanks..

 

[terry712]

what does the

http://ihatethiscomputer:8081

show

 

[lorrscan]

Hi Terry172,

Thanks for your reply, please see the following log from one of the affected machines

McAfee Agent Activity Log

Version [3.5.5.438] Computer name [ACSIR0193] ePO server [DALEPODB01]
View debug logs: FrameSvc current / previous, NaPrdMgr current / previous
Date and Time Type Component Message
19 February 2007 11:07:25 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:12:21 Info Agent Agent Started Enforcing policies
19 February 2007 11:12:21 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:12:21 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:12:21 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:12:21 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:12:21 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:12:21 Info Agent Agent finished Enforcing policies
19 February 2007 11:12:21 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:12:22 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:12:23 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:12:23 Info Script Initializing update...
19 February 2007 11:12:23 Info Script Verifying catalog.z.
19 February 2007 11:12:23 Info Script Extracting catalog.z.
19 February 2007 11:12:23 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:12:24 Info Script Verifying VS800det.mcs.
19 February 2007 11:12:25 Info Script Verifying VS800det.mcs.
19 February 2007 11:12:25 Info Script Update Finished
19 February 2007 11:12:25 Info Script Closing the update session.
19 February 2007 11:12:25 Info Scheduler The task Deployment is successful
19 February 2007 11:12:25 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:17:21 Info Agent Agent Started Enforcing policies
19 February 2007 11:17:21 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:17:22 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:17:22 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:17:22 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:17:22 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:17:22 Info Agent Agent finished Enforcing policies
19 February 2007 11:17:22 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:17:23 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:17:24 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:17:25 Info Script Initializing update...
19 February 2007 11:17:25 Info Script Verifying catalog.z.
19 February 2007 11:17:25 Info Script Extracting catalog.z.
19 February 2007 11:17:25 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:17:26 Info Script Verifying VS800det.mcs.
19 February 2007 11:17:26 Info Script Verifying VS800det.mcs.
19 February 2007 11:17:26 Info Script Update Finished
19 February 2007 11:17:26 Info Script Closing the update session.
19 February 2007 11:17:26 Info Scheduler The task Deployment is successful
19 February 2007 11:17:26 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:22:22 Info Agent Agent Started Enforcing policies
19 February 2007 11:22:22 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:22:22 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:22:22 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:22:22 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:22:23 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:22:23 Info Agent Agent finished Enforcing policies
19 February 2007 11:22:23 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:22:24 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:22:24 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:22:25 Info Script Initializing update...
19 February 2007 11:22:25 Info Script Verifying catalog.z.
19 February 2007 11:22:25 Info Script Extracting catalog.z.
19 February 2007 11:22:25 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:22:26 Info Script Verifying VS800det.mcs.
19 February 2007 11:22:26 Info Script Verifying VS800det.mcs.
19 February 2007 11:22:26 Info Script Update Finished
19 February 2007 11:22:26 Info Script Closing the update session.
19 February 2007 11:22:27 Info Scheduler The task Deployment is successful
19 February 2007 11:22:27 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:27:23 Info Agent Agent Started Enforcing policies
19 February 2007 11:27:23 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:27:23 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:27:23 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:27:23 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:27:23 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:27:23 Info Agent Agent finished Enforcing policies
19 February 2007 11:27:23 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:27:24 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:27:24 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:27:25 Info Script Initializing update...
19 February 2007 11:27:25 Info Script Verifying catalog.z.
19 February 2007 11:27:25 Info Script Extracting catalog.z.
19 February 2007 11:27:25 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:27:26 Info Script Verifying VS800det.mcs.
19 February 2007 11:27:26 Info Script Verifying VS800det.mcs.
19 February 2007 11:27:26 Info Script Update Finished
19 February 2007 11:27:26 Info Script Closing the update session.
19 February 2007 11:27:27 Info Scheduler The task Deployment is successful
19 February 2007 11:27:27 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:32:23 Info Agent Agent Started Enforcing policies
19 February 2007 11:32:23 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:32:24 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:32:24 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:32:24 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:32:24 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:32:24 Info Agent Agent finished Enforcing policies
19 February 2007 11:32:24 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:32:25 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:32:25 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:32:26 Info Script Initializing update...
19 February 2007 11:32:26 Info Script Verifying catalog.z.
19 February 2007 11:32:26 Info Script Extracting catalog.z.
19 February 2007 11:32:26 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:32:27 Info Script Verifying VS800det.mcs.
19 February 2007 11:32:27 Info Script Verifying VS800det.mcs.
19 February 2007 11:32:28 Info Script Update Finished
19 February 2007 11:32:28 Info Script Closing the update session.
19 February 2007 11:32:28 Info Scheduler The task Deployment is successful
19 February 2007 11:32:28 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:37:24 Info Agent Agent Started Enforcing policies
19 February 2007 11:37:24 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:37:24 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:37:24 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:37:24 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:37:25 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:37:25 Info Agent Agent finished Enforcing policies
19 February 2007 11:37:25 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:37:26 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:37:26 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:37:27 Info Script Initializing update...
19 February 2007 11:37:27 Info Script Verifying catalog.z.
19 February 2007 11:37:27 Info Script Extracting catalog.z.
19 February 2007 11:37:27 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:37:28 Info Script Verifying VS800det.mcs.
19 February 2007 11:37:28 Info Script Verifying VS800det.mcs.
19 February 2007 11:37:28 Info Script Update Finished
19 February 2007 11:37:28 Info Script Closing the update session.
19 February 2007 11:37:29 Info Scheduler The task Deployment is successful
19 February 2007 11:37:29 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:42:25 Info Agent Agent Started Enforcing policies
19 February 2007 11:42:25 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:42:25 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:42:25 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:42:25 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:42:25 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:42:25 Info Agent Agent finished Enforcing policies
19 February 2007 11:42:25 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:42:26 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:42:26 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:42:27 Info Script Initializing update...
19 February 2007 11:42:27 Info Script Verifying catalog.z.
19 February 2007 11:42:27 Info Script Extracting catalog.z.
19 February 2007 11:42:27 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:42:28 Info Script Verifying VS800det.mcs.
19 February 2007 11:42:28 Info Script Verifying VS800det.mcs.
19 February 2007 11:42:28 Info Script Update Finished
19 February 2007 11:42:28 Info Script Closing the update session.
19 February 2007 11:42:29 Info Scheduler The task Deployment is successful
19 February 2007 11:42:29 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:47:25 Info Agent Agent Started Enforcing policies
19 February 2007 11:47:25 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:47:25 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:47:25 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:47:25 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:47:26 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:47:26 Info Agent Agent finished Enforcing policies
19 February 2007 11:47:26 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:47:27 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:47:27 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:47:28 Info Script Initializing update...
19 February 2007 11:47:28 Info Script Verifying catalog.z.
19 February 2007 11:47:28 Info Script Extracting catalog.z.
19 February 2007 11:47:28 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:47:29 Info Script Verifying VS800det.mcs.
19 February 2007 11:47:29 Info Script Verifying VS800det.mcs.
19 February 2007 11:47:30 Info Script Update Finished
19 February 2007 11:47:30 Info Script Closing the update session.
19 February 2007 11:47:30 Info Scheduler The task Deployment is successful
19 February 2007 11:47:30 Info Scheduler Scheduler: Task [Deployment] is finished
19 February 2007 11:52:12 Info Agent Agent started performing ASCI
19 February 2007 11:52:12 Info Management Collecting Properties
19 February 2007 11:52:13 Info Agent Agent is looking for events to upload
19 February 2007 11:52:14 Info Agent Agent communication session started
19 February 2007 11:52:14 Info Agent Agent is sending PROPS VERSION package to ePO server
19 February 2007 11:52:14 Info Agent Agent is connecting to ePO server
19 February 2007 11:52:15 Info Agent Package uploaded to ePO Server successfully
19 February 2007 11:52:15 Info Agent Agent communication session closed
19 February 2007 11:52:15 Info Agent Agent received REQUEST PROPS package from ePO server
19 February 2007 11:52:15 Info Agent Agent communication session started
19 February 2007 11:52:15 Info Agent Agent is sending FULL PROPS package ePO server
19 February 2007 11:52:15 Info Agent Agent is connecting to ePO server
19 February 2007 11:52:18 Info Agent Package uploaded to ePO Server successfully
19 February 2007 11:52:18 Info Agent Agent communication session closed
19 February 2007 11:52:18 Info Agent Agent received POLICY package from ePO server
19 February 2007 11:52:18 Info Agent New server policy was successfully merged
19 February 2007 11:52:18 Info Agent Enforcing newly downloaded policies
19 February 2007 11:52:18 Info Agent Agent Started Enforcing policies
19 February 2007 11:52:18 Info Management Compiling policies
19 February 2007 11:52:18 Info Agent Agent will connect to the ePO Server in 60 minutes and 0 seconds.
19 February 2007 11:52:18 Info Management Enforcing Policies for VIRUSCAN8000
19 February 2007 11:52:19 Info Management Enforcing Policies for EPOAGENT3000META
19 February 2007 11:52:19 Info Management Enforcing Policies for EPOAGENT3000
19 February 2007 11:52:19 Info Management Enforcing Policies for ePolicy Orchestrator Agent
19 February 2007 11:52:19 Info Scheduler Added a new task Deployment to Scheduler's task list
19 February 2007 11:52:19 Info Agent Agent finished Enforcing policies
19 February 2007 11:52:19 Info Agent Next policy enforcement in 5 minutes
19 February 2007 11:52:20 Info Scheduler Scheduler: Invoking task [Deployment]...
19 February 2007 11:52:20 Info Script Checking update packages from repository ePOSA_ACSCRKAEPO.
19 February 2007 11:52:21 Info Script Initializing update...
19 February 2007 11:52:21 Info Script Verifying catalog.z.
19 February 2007 11:52:21 Info Script Extracting catalog.z.
19 February 2007 11:52:21 Info Script Loading update configuration from: Catalog.xml
19 February 2007 11:52:22 Info Script Verifying VS800det.mcs.
19 February 2007 11:52:22 Info Script Verifying VS800det.mcs.
19 February 2007 11:52:22 Info Script Update Finished
19 February 2007 11:52:22 Info Script Closing the update session.
19 February 2007 11:52:23 Info Scheduler The task Deployment is successful
19 February 2007 11:52:23 Info Scheduler Scheduler: Task [Deployment] is finished

 

[prak355]

Hi mate, we've had this problem for the last few weeks... servers in a new Vscan 8.5i group just weren't being updated and ePO wasn't communicating with the agent on lots of computers.

Turns out that there was duplication of computer names. Go through your lists and ensure that the computers are only in the required group. Once I did this, all problems dissapeard.

Regards.

 

[terry712]

the log looks ok
try what prak says

it is obviously getting to the server as is displayed
the other log tells you more if you save the previous - it is more diagnostic

i assume you are still at default policy that it is 5 mins and i assume you have checked the obvious - of can it resolve back etc

 

[lorrscan]

Thanks Prak, Terry

I have searched the directory listing for this machine name and nothing is returned I don't think there are duplicate machines. Yes it seems that the default policy is set at 5 mins and I can ping the computer name from the epo server, it resolves the machine's ip address..

Which of the other logs should I try I have the following debug logs
FrameSvc current/previous and NaPrdMgr current/previous?

Thanks again for your help..

 

[terry712]

i would be inclined to reinstall the framepkg from the console

then stop and start the agent on the pc

 

[lorrscan]

Issue resolved!

Thanks to everyone who replied to my query, it was in fact an issue with the agents GUID key in the registry. Becasue the agent was included in the image all machines subsequently inherited the same agent GUID. I deleted the key from the registry and restarted the framework service which automatically generated a new agent GUID. I found the resolution at the following link

http://forums.mcafeehelp.com/viewtopic.php?t=57026&view=next&sid=07864547d9376bf3d6216d320425e7a7

Thanks...

 

[LawnBoy]

You just saved me a huge amount of work. Have just switched to McAfee, and am reworking the images now. Thanks a million.

 

[lorrscan]

Hi LawnBoy, That's great it took me ages to realise what was wrong something so simple.. What I would probably do is delete the agent GUID id from the registry and then create the new image. Then each machine would get a unique GUID id when the framework service starts up again.

 

[LawnBoy]

Yep, that's the plan. Thanks again.