I have a McAfee server issuing updates, but when I request an update from the client interface and click ABOUT to see if the newest updated DAT is on the client, it still shows the old DAT file version. Meanwhile, the update in the log shows successful. Any thoughts? Is this just a cosmetic thing?

2 Spice ups

Old DAT as in a previous day or old as in 1111

What version VSE and agent? What client OS?

If this is a new setup, you have to create a daily update task first

It’s strange.

All laptops have 8.8.0 BUT the laptops that are showing the current 8805 DAT file version have Scan Engine version 5700. Those that have the DAT file 8798 and have issues updating the DAT file version are Scan Engine 5900.

I thought when you ran an update, it updates everything. Why would the version numbers be all over the place?

Engine 5900 is the only supported version, what are your OSes and VSE build numbers, you should be on P10 or thereabouts.

If you can show me a screenshot (blur machine names) i can likely help

ill see what I can gather. But in the meantime. can you give me a run down of how the DAT files version, the scan engine and VSE version all relate? I thought they are all updated when the client syncs with the epo server but apparently not.

I don’t know what you want to know or what you already know - you’re managing it so i don’t want to sound like i’m teaching someone to suck eggs.

But it also depends on your setup.

Daily DATs have to be set, a fallback to going online may be why some get it and others don’t, your update rules determine how the clients update and since i cannot see them i can’t be of much use until i know what you have.

The Engine is the main part that does the scan and detection, all clients should be on 5900, anything else is not supported.

VSE should be P8, P9 or P10, depends on OS but should be recent - you have to check these in, they are not automatic.

You should be looking to move to ENS 10.5.3

Scan Engine is 5900.7806

DAT Version is 8789.0000

VirusScan Enterprise is 8.8

Some of the systems that connect to a different server are showing Scan Engine 5700.00 and DAT Version 8805.0000

So with that said. I need to let the guys know that the scan engine version on the other server is out of date? I figured the DAT version and Scan version would be tied together.

Its going to be hard to help if you only give snippets of information - are you saying you have multiple repository servers?

If so, the primary should be updating the slaves, if that is not happening something is misconfigured.

Engine 5900 should have been forced months ago, does the repository have internet access?

Do you have A server or multiple?

Thanks for your help and information Rod. I am still learning this stuff so you’ve been a help. I think I’m at a standstill right now. You have the best input though.

If you need any more let me know or tag me. I’ve been a McAfee administrator some 15 years.