Upgrade Agent

[MehdiBEN]

Hello there, 

When we wanted to upgrade the TA to the version 5.7.7, we received this error message :

Détails : Product "EPOAGENT3700LYNX" installation failed, reason "No qualifying product for the update"..

Jump scenario : version 5.7.0.189 to 5.7.7.378

Best regards.

[ludaneva]

Hello,

Based on the failed install error: "No qualifying product for the update",  and agent install package product name "EPOAGENT3700LYNX", it coud be assumed that the target endpoint OS might not be a Linux box. This may be a stupid question, but has the correct agent package been chosen for the target OS system?

Regards

[MehdiBEN]

Hello ludaneva,

no question is stupid !!!!😀

Please find below our parameters :

Name of Operating system : McAfee Advanced Threat Defense 4.19.151-3.mlos3.x86_64 Server

OS Service Pack Version : 151-3.mlos3.X86_64

Operating System : OS Type:Linux,OS Platform:Server,OS Version:4.19,OS Service Pack Version:151-3.mlos3.x86_64

Target Agent to deploy : LNX 5.7.7 /378

Thanks for your support.

[cdinet]

You have to use mlos version of the agent to upgrade one of those, but some appliances are not upgradable outside of a product upgrade.  I will move this to atd team to verify.

[hsadi]

Hi Mehdi,

Can I ask you what do you mean by "TA"?

Just to let you know that ATD comes with Agent/DXL bundled together and you cannot upgrade Agent package or other packages in ATD, as ATD is a closed environment, and we don't recommend installing individual packages in ATD. 

My questions:

Why you need to upgrade ATD McAfee Agent?

Is this related to ATD (Advanced Threat Defense)? What's the ATD version?

Regards, 

[MehdiBEN]

Hello Hakim, please find below the answers : 

Can I ask you what do you mean by "TA"? Trellix Agent

My questions:

Why you need to upgrade ATD McAfee Agent? Support told me that under the version 5.7.7.378, there are some vuln. CVE-2022-2313

Is this related to ATD (Advanced Threat Defense)? What's the ATD version? Intelligent Sandbox 5.0.0.11

Best regards.

[hsadi · Accepted solution]

Hi Mehdi,

Thank you for your quick response.

The vulnerability CVE-2022-2313 only affect MA prior to 5.7.7 for Windows and not linux, as it is related to DLL hijacking vulnerability.

Also, TIS 5.0 is tested with TA 5.7.0 we cannot install a different version of TA into TIS 5.0 as it could break the coherence of the system and render ATD unsupported.

Please let me know if you have more questions.

Best regards,

Hakim

[SWISS]

Common....

Why Update?

Because we update 24/7 these days everything and every producer. That's all we do in IT these times. ESX Update, Agent Update, EPO Update. And if we do it right guess what then it's too expensive and they move all to cloud. (To Windows Defender ATP).

So if customers asks how to update the MLOS Agent the question is right. Also some things never work regarding connection from ATD to other Mcafee Products how customers think they should/Could. And maybe the Agent would sole in a lucky strike try. (Like the 50 Unknown report back to TIE after a PDF files was analysed in ATD and is CLEAN) which makes absolute no sense (Fortinet does it correct).

Greetings from Switzerland