McAfee Blocking Behaviour

[annieagogo]

Hi - hope you can help !!!

I have SMS 2 and McAfee installed on my network. I am receiving an alert from our workstations stating :

Blocked by behaviour blocking rule Common Standard Protectionrevent Modification of McAfee Common Management Agent files and settings. (from computername IPaddress computername\SMSCliToknLocalAcct& running Virus Scan Ent 8.5 OAS)

I was wondering if anybody knows why McAfee is objecting to the SMS account. The SMS account is there to allow admin installs to occur with distributed software and is a standard SMS account. Is there some way to stop this alert from happening ?

Thanks

Annie

 

[LawnBoy]

Common Standard Protectionrevent Modification of McAfee Common Management Agent files and settings.

Sounds like SMS is trying to change some settings for the McAfee mgmt agent. Those changes will have to be done through ePO.

 

[annieagogo]

Ive looked into this a little more and it looks as theough there is a problem with the SMS software inventory and the EPO agent.

Anyone have any ideas on any past issues between these 2 ?

 

[AVChap]

Looks like SMS is pushing configuration settings to the McAfee CMA. Since VS is configured to block changes to its settings from other sources outside of the CMA, it'll be blocked. Either you prevent SMS from doing so or allow it from the VS console.

AVChap

“I have not failed 700 times. I have not failed once.
I have succeeded in proving that those 700 ways will not work.
When I have eliminated the ways that will not work,
I will find the way that will work.”
--Thomas Edison