Old ENS Linux DATs

[mlajoie]

Good morning.  ENSL is installed in /var on our LInux systems.  It seems the DAT files are filling it up.  Is it safe to delete old .zip DAT files?  Please advise.  Thanks.

[Nitisha_Awas · Accepted solution]

Hi,

Thank you for reaching us on the community portal.

Kindly make sure the system requirement is met for the ENSL installtion referring below documents:

Installation directory — Minimum 2.5 GB
/opt/McAfee directory — Minimum 750 MB
/tmp directory — Minimum 1 GB free space
/var directory — Minimum 3 GB partition, 750 MB free space

https://docs.trellix.com/bundle/endpoint-security--v10-7-0-installation-guide-linux/page/GUID-04C397...

=================================================================

Yes, you can delete the older DAT files, and also check if peer-to-peer serving is enabled in the agent policy or no ?

P2P stores a local copy of the downloaded files to provide to other peers, so you can disable peer-to-peer serving and see if this solves the problem.

Hope this helps.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[BSharma]

May I know the McAfee Agent version and ENSL version

Also the Kernel version (uname -a). 

Thanks 

[mlajoie]

3.10.0-1160.53.1.el7.x86_64 #1 SMP Thu Dec 16 10:19:28 UTC 2021 x 86_64 x86_64 x86_64 GNU/Linux

McAfee agent = 5.7.5.504
ENSL = 10.7.5

[BSharma · Accepted solution]

@mlajoie 

As per previous reply from @Nitisha_Awas, you can delete the older DAT files, and also check if peer-to-peer serving is enabled in the agent policy .

Also As per the kernel version I will also suggest you to please install 10.7.7 and latter version of ENSL. 

3.10.0-1160.53.1.el7.x86_64 - Supported version - ENSL 10.7.7 or later

Ref: https://kc.mcafee.com/corporate/index?page=content&id=KB93176

Hope this helps.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[mlajoie]

thank you!