+ Post New Thread
Results 1 to 6 of 6
Windows Thread, McAfee Mirror fails in Technical; I've hit a dead end troubleshooting this one so I'm throwing it out here. We've got McAfee VirusScan 8.5 at ...
  1. #1
    bizzel's Avatar
    Join Date
    Jul 2007
    Location
    Cambridge
    Posts
    654
    Thank Post
    102
    Thanked 204 Times in 72 Posts
    Rep Power
    51

    McAfee Mirror fails

    I've hit a dead end troubleshooting this one so I'm throwing it out here. We've got McAfee VirusScan 8.5 at school and the clients are set up to update primarily from our mirror server via an IIS site. If that fails they fall back to the McAfee repository using HTTP and finally FTP.

    Our mirror task is set up to run nightly at 3:30am except it has two problems. The first is that, for some reason, it's stopped running. The automatic update of the server's DATs works fine and that's running under the same credentials. If I run it manually it starts alright but it won't run on its own for some reason. The other problem is that it often appears to update successfully (warns about corrupt files but it always redownloads them) but then the clients try to update from it and they fail with "Updates were not applied because the update process encountered an unknown error: SPAMSAFE1000." Interestingly, one of the corrupted files being downloaded is sk_dets.mcs - Spamkiller Detections, I presume, but we don't actually have spamkiller or anything of the sort. Very weird goings on. Has anyone else seen either of these issues?

    Edit: We're not using e-policy orchestrator and I've tried clearing out the mirror folder to no avail.
    Last edited by bizzel; 12th January 2008 at 12:36 AM.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,247
    Thank Post
    882
    Thanked 2,745 Times in 2,319 Posts
    Blog Entries
    11
    Rep Power
    785
    The fact that it runs when you run it manually and not when you are not logged in could indicate that the user account does not have the privileges to run it as a scheduled task in the background. I would make sure that your service account is a member of "Domain Admins" to be sure that this is not the case.

    Also, just a thought as I don't use McAffe do they have a separate manual update package that you can download. If so this may use full copies of the definitions files and overwrite any corrupted partial files that may have ended up on your server.
    Last edited by SYNACK; 12th January 2008 at 06:06 AM.

  3. #3
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    25
    Quote Originally Posted by SYNACK View Post
    The fact that it runs when you run it manually and not when you are not logged in could indicate that the user account does not have the privileges to run it as a scheduled task in the background. I would make sure that your service account is a member of "Domain Admins" to be sure that this is not the case.

    Also, just a thought as I don't use McAffe do they have a separate manual update package that you can download. If so this may use full copies of the definitions files and overwrite any corrupted partial files that may have ended up on your server.
    Have you changed you Domain Admin password recently ?

  4. #4

    Join Date
    Jan 2006
    Location
    Surburbia
    Posts
    2,178
    Thank Post
    74
    Thanked 307 Times in 243 Posts
    Rep Power
    115
    I've seen the original mirror tasks not running. Solution was to make a new mirror task - you should only need to set the location of the mirror and the schedule (no guarantees but for me the credentials magically default to the right thing).

    Don't know about the client issue but the mirror contains file for zillions of different versions of clients. Mirror update download failures for sk_dets.mcs are a regular sight in the logs (ditto for spamcom.dll, su.dll) and that doesn't usually break things i.e. if the mirror task is successful the clients are usually happy downloading from the mirror.

    Renaming, remaking and repopulating the mirror folder via a manual kick-off of the mirror task is all I can think of, but you say you've done that. Have you also tried un & reinstalling a couple of the clients just in case the trouble is there? Or have you tried stopping your IIS and getting a client to update to see if it still has the problem when that (presumably) falls back to the vendor's update site?

  5. #5
    eean's Avatar
    Join Date
    May 2006
    Location
    Seoul
    Posts
    571
    Thank Post
    70
    Thanked 57 Times in 41 Posts
    Rep Power
    31
    Not the same issue, I know, but may be something to try:
    My Mcafee (v.8.0) stopped updating on new installs. Old installs, continued to update themselves fine but new installs always came up with update failed. (Nothing had changed at my end) It was the same when they took the update from the mirror or from the internet. In the end, I had to download a superdat update and install that (using silent options) on each client, they then seem able to download the newer updates fine.

  6. #6
    bizzel's Avatar
    Join Date
    Jul 2007
    Location
    Cambridge
    Posts
    654
    Thank Post
    102
    Thanked 204 Times in 72 Posts
    Rep Power
    51
    Thanks. I'll give these a shot when Monday rolls around.



SHARE:
+ Post New Thread

Similar Threads

  1. McAfee EPO and Thin Clients
    By Marvintpa in forum Thin Client and Virtual Machines
    Replies: 3
    Last Post: 30th August 2007, 10:29 AM
  2. Migrating McAfee ePO
    By Nij.UK in forum How do you do....it?
    Replies: 4
    Last Post: 26th April 2007, 01:40 PM
  3. Moving Mcafee EPO to a new server
    By manick in forum Network and Classroom Management
    Replies: 2
    Last Post: 5th April 2007, 12:26 PM
  4. Mirror, Mirror, on the wall...
    By AshF in forum Other Stuff
    Replies: 16
    Last Post: 22nd January 2007, 07:54 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •