Confused about ePO updates - 10.6.1.190514

[Former Member]

Hi!

I am really confused - ePO shows me available updates. If I have a look in in the ePO Software Manager I get a "3 Updates Available" but not packages are marked as updateable.

When I have a closer look into "McAfee Endpoint Security 10.6.1.1279.1 May Update Bundle" I can see which packages are available:

Checking in the bundle package is downloading the missing packages and hotfixes are available then, but no "Packages". So updates kept shown as not applied and still availabe?!

Cheers

[jwoodmls]

I've had similar confusion - I have an open topic about making heads or tails of ENS updates.  I'd like to move fully into ENS but want to make sure I understand updates better first - I'm seeing the same thing of listings for updates available, but then when I go into the category, I don't see them.

[sam.dunford@por]

I appear to be having the exact same issue with the May 2019 Update: 10.6.1.190514

I have the option listed "McAfee Endpoint Security 10.6.1.1279.1 May Update Bundle - Update available". Showing the version as 10.6.1.1279 with nothing listed in the "Checked In Version" field.

I have checked the details and found that it appears that there are two sets of hotfixes, and no install packages included in this bundle as far as I can tell.

When we check our system log we can see that it reports that everything was successful, however you can see in the logs the attempt to double install the hotfixes.

When we check our master repository, we can see that the hotfixes have checked in successfully, but no install packages appear.

It does look like the extensions have successfully been installed:

When you look at the bundle in software manager, are you all seeing the same issue? I would be surprised if this is only limited to a few users.

Any assistance with this would be greatly appreciated

Thanks

[Former Member]

I hope this helps clarify somewhat:

The May Update bundle contains extensions and hotfixes for each module. There is no "patch" or "install" package included. The Update = the Hotfix.

[sam.dunford@por]

Hi Chealey

Thanks for responding, that has ruled out what I thought might be causing the issue. Although I am still a bit confused. Even after I successfully check in the bundle: "McAfee Endpoint Security 10.6.1.1279.1 May Update Bundle", I still have "Update available" listed again. EPO server was also rebooted but this made no difference.

When I've checked the release notes for "McAfee Endpoint Security 10.6.1 - May Update" I can see the versions listed as:

Endpoint Security Platform 10.6.1.1449
Endpoint Security Threat Prevention 10.6.1.1550
Endpoint Security Firewall 10.6.1.1278
Endpoint Security Web Control 10.6.1.1311

I've done some further testing and found that if I update and patch a machine to the latest hotfix, it will update the various packages on the machine to those versions.

Now that I've confirmed that the hotfix is applying successfully and everything is checked in, can you think of anyway to clear "Update Available" issue?

Thank you very much for the help

[Former Member]

Glad it helped somewhat. Yes, once deployed the clients should have the versions you just noted:

Endpoint Security Platform 10.6.1.1449
Endpoint Security Threat Prevention 10.6.1.1550
Endpoint Security Firewall 10.6.1.1278
Endpoint Security Web Control 10.6.1.1311

However the update on the client won't effect the "Updates available" in the Software Manager. This only clears after anything that can be updated in that section is updated in your Master Repository.

What's still showing as red? Is it the same packages as @Former Member reported? 

I'm afraid I can't reproduce this in my lab.

[sam.dunford@por]

Thanks again, you have been a great help.

I still have "Update Available" listed against;

"McAfee Endpoint Security 10.6.1.1279.1 May Update Bundle"

It doesn't appear that I can add any more screenshot so if you can please take a look at the first one I attached in my previous reply, you will see what I am seeing after I have successfully checked the bundle in (according to the server log that is) and then going back into Software Catalog

I don't think I have precisely the same issue as @Former Member as they appear to be using a slightly older version of EPO than I am. When I check each component of the bundle, each of the hotfixes listed have these Available Version & Checked in Versions:

Endpoint Security Platform 10.6.1 May Update
Available Version: 10.6.1.190514
Checked in Version: 10.6.1.190212
Check-in Date: 2/18/19 8:45 AM
Installed Name: Endpoint Security Platform
Branch: Current

Within the update details, All 4 hotfixes state that the checked in version is 190212 even though I can see the new hotfixes listed in the master repository.

I have tested and found that I am able to patch a client machine to the latest version using the current branch. The master repository, shows;

Endpoint Security Platform
Hotfix - 10.6.1 - 190514 - Current

Endpoint Security Threat Prevention
Hotfix - 10.6.1 - 190514 - Current

Endpoint Security Firewall
Hotfix - 10.6.1 - 190514 - Current

Endpoint Security Web Control
Hotfix - 10.6.1 - 190514 - Current

Hopefully that clarifies what I am seeing my side.

Thanks

[Former Member]

Thanks for that. Based on the screenshots shared previously it does appear to all be checked in successfully. Do you have any older versions of ENS checked into the Master Repository? If yes, which branch are they in? And which version is checked in?

It could be still detecting older versions and hence showing items can be updated.

[sam.dunford@por]

No other ENS versions checked in I'm afraid. I updated straight into the current branch. There are no ENS packages in previous or eval

I can see the previous hotfix listed in the master repository however,

[T_P]

Remove the other Hotfix from the EPO and the update available will disappear