MA Agent 5.6 without DXL

[denn]

Hello, any one tried to install only 5.6 agent ? Any possibilities to install in without DXL client ?

[Hawkmoon]

Hi denn,

Currently DXL is installed automatically with MA 5.6, there is no option to 'not install' or 'remove it' after the fact.

An option if you wish :

How to prevent DXL clients from connecting to a broker after installing McAfee Agent 5.6

Technical Articles ID:   KB91155

[Olsen]

Hi !
I have a question about the DXL Client who is delivered with MA 5.6.
When i don't have an DXL Broker actived, do i have to expect any disadvantages or problems with this client?
Should i disable the DXL Client?

[denn]

I think McAfee should think about it. Etc. we have environment there we are not using DXL/TIE, and this client is not required just adding additional software and vulnerabilities.

[cdinet]

If you are not using dxl in your environment, then the dxl portion of the agent will be idle and do nothing, so there is nothing you have to configure or do with it.  You don't have to confugure any policies or anything for it if you have no brokers or TIE servers in your environment.  It will have no performance effect or any other impact on the clients.

[Former Member]

Hawkmoon,

From the KB:

Select Menu, Configuration, Server Settings, DXL Topology from server settings.  DXL Topology does not exist on my 5.9.1 server.

Recommendation?

Thanks,

DocB

[twenden]

The DXL settings under server settings also don't exist for us. We are using ePO 5.9.1. We just finished deploying agent 5.6.0.878 to fix those security vulnerabilities. We also don't use DXL/TIE in our environment. It is a shame that there is not a way that you can select to not install the DXL client. 

[Hawkmoon]

Hi all,

DXL is separate product install to an ePO environment, unless you have it installed you will not see the settings etc the KB I mentioned discusses.

FYI:
Once installed and extensions added to ePO you will see the following in ePO server settings page (Filtered on DXL)

...and this in the main ePO UI:

So if you don't have DXL servers and brokers, you can ignore the KB. If you do have and use DXL server etc, the article is to be considered if needed.

FYI: In ePOs server log you might see message not unlike the below:

20190307165848 I #03292 NAIMSERV PI load: DXL_____1000
20190307165848 I #03292 NAIMSERV PI load: DXL_____1000 NOT found