 |
 |
Hallo, Es gibt einen neuen Release eines Tools mit welchen man Clients scannen kann und alles was es nicht kennt (spanisch vorkommt) vollautomatisch zu Mcafee GTI sendet. Man kann damit unbekannte Files an McAfee einsenden zur Analyse. Falls man eine E-Mail Adresse angibt bekommt man am Schluss den Report nach der Analyse. Die […]
Trellix/MCAFEE ATD: Sandbox stays at STATUS BAD We just had a case where an MCAFEE ATD-3000 Sandbox was staying at the Status BAD. A person hat submitted a file to analyse with XVIEW (Look into the Sandbox) and did shutdown the VM after that analyse. NO > Rebuild of the VM’s did not solve NO […]
EPO integrated McAfee Security for Exchange 8.6 SP2 If you have a fully integrated Mcafee Security for Exchange which you manage the POLICY and SETTINGS from the EPO (Not on the Exchange itself) you may see an error in the GUI where it says “Your Anti-Virus DAT may be out of DATE”. That is just […]
01.09.2020, this is solved in 10.7.0.1607 JULY 2020 Release Produktversion (Endpoint Security Platform) 10.7.0.1961 JUL 2020 Release Produktversion (Endpoint Security Threat Prevention) 10.7.0.2021 JUL 2020 Release Web Control 10.7.0.1607 JUL 2020 Release On several W10 machines we have seen Outlook.exe crash with Mcafee ENS Endpoint Security 10.7 Web Control active. This behaviour is seen up […]
Domains with .CH (Switzerland) extension active spreading Locky Ransomware in 2016/2017. We would like to state that the provider almost can’t do anything if the infect is with a hosting website and the customer has access via FTP and the customers client gets targeted. If they have a key logger or snigger on the client […]
Ich habe einige neuere Präsentation zu neuen Webisolationen Konzepten angesehen. Arbeite selber zu 90% mit Mcafee seit 12 Jahren kenne aber diverse Symantec Enterprise Produkte von früher. Symantec bewirbt derzeit Ihre Web Isolation Loesung. (Fireglass gekauft und integriert in Ihre Serie der Produkte) Der key Punkt ist, dass dies bei Grossfirmen NUR in Verbindung mit […]
Fortigate Application Filter Certificate wrong/missing Entry sample for an important laptop driver (W10 Deployment fails because of signed Driver Revocation Lookup) OR HOW a missing small ENTRY I a FORTIGATE FIREWALL IPS/APP filter can ruin your Windows 10 OS-Deployment work. Reason: Missing entry in Fortigate Application Filter “ROOT.CERTIFICATE.URL” and “OCSP” source of failing deployment […]
The store driver couldn’t deliver the public folder replication message “Backfill Request (SMTP Address)” because the following error occurred: Property: [0x3ff00102] , PropertyErrorCode: UnknownError, PropertyErrorDescription: 0x8004010 > Was solved finally on Exchange 2010 SP3 WITH Rollup 2 > Please see end of document During Public Folder Migration you may have invalid Categories in Exchange 2003/2007. […]
We just did finish our first look at the new MVSION Client when already a new Release came out the last days. https://kc.mcafee.com/corporate/index?page=content&id=SNS1746 This report reflects version 18.10.2.2. Main reason business drivers for the MVSION version for us are: AMSI integration and usage of Windows Defender as base pattern scanner (You can only scan malware […]
McAfee EPO Server SQL Server Performance tips This is based on McAfee Information for their McAfee EPO DB running under SQL 2005/2008R2/2012 upwards The EPO Database itself should be: Autoshrink = False Auto Close = False Auto update Statistics = True Auto shrink and auto close are database options that should be set to false. […]
Mcafee EPO Server 5.3.3 seems to have problems on some older OS like 2008R2 regarding TLS ciphers (We did not see this in 2012R2 to date with our customers). The A-Z sort order of those is the source. This had such an impact that Mcafee did release this info to all customer with SNS-Alert. This […]
It’s improtant to understand that the McAfee Agent itself DOES OPEN all needed OS Windows Firewall Ports for you automatic. You can see those under “macmnsvc”. But it’s Important to keep track of physical Firewall Ports and if you separate Clients or Server from the EPO with a Perimeter Firewall or VLAN-Firewall. McAfee Agent: This […]
12.05.2017 Urgent Release FRIDAY, Wana Decrypt0r | Wana Decryptor | WanaDecryptor@.exe https://kc.mcafee.com/corporate/index?page=content&id=KB89335 EXTRADAT: https://kc.mcafee.com/resources/sites/MCAFEE/content/live/CORP_KNOWLEDGEBASE/890 00/KB89335/en_US/EXTRA.zip EXTRA.zip McAfee is aware that several customers are impacted by a new ransomware. Ransom-WannaCry (also known as WannaCry, WCry, WanaCrypt and WanaCrypt0r) is encrypting files with the .wnry, .wcry, .wncry, and .wncryt extensions. Encryption is occurring on the local […]
Problem: Mcafee Security for Exchange 8.5 Patch 1 Update fails on 2010 SP3 CAS with HUB roll Product: McAfee Security for Microsoft Exchange — Error 1920.Service MSExchangeIS (MSExchangeIS) failed to start. Verify that you have sufficient privileges to start system services. Migration Groupshield Mcafee Security for Exchange 8.6 to Patch 1 We first thought this was related […]
5 Microsoft Patches take out Mcafee DLP copy handler function. Device control (USB) black is not affected. Environment McAfee Data Loss Prevention Endpoint (DLP Endpoint) software earlier than 9.3.425 (DLP Endpoint 9.3 Patch 4 HF25) Microsoft Windows 7 64-bit (32-bit is not affected.) Problem Several applications fail to start after you install Microsoft Patch MS15-038 or […]