McAfee Agent with 505 error after upgrade

[User16096767]

Hi Team, I hope I can get help on this issue.

We use third party tool to Install McAfee Agent after extracting RPM package.

Agent communicate back fine when installing the extracted RPM package with version 5.7.4. No issue. The issue we are seeing is when we upgrade the agent from 5.7.4 to any of the higher agent version using ePO, servers stops communicating with "Received response from broker with status <505>" 

[savidudu]

Hello,

What if you install the application without third party application?

Is that getting installed?

Thanks,

[MarcinK]

Helo.

Do You resolved your problem with error 505 after upgrade agent?

[cdinet]

If you are getting that error, you might want to open a ticket.  We would need to see all the install logs plus some debug logging possibly from the agent.

Does it go away if you do a reboot?

[neutronscott · Accepted solution]

We use to get this before and I fixed it. Then it resurfaced in another environment and I forgot all about my fix and just reinvestigated this. Hopefully a fix can be implemented.

During upgrade the agent runs yum -y remove MAProvision which likely removed MFEdx due to dependencies. My fix was to run rpm -e MAProvision right after the agent is installed using yum install MAProvision or at least before you have the ePO server upgrade it.

[cdinet]

The install guide has additional steps for adding dxl.  

https://docs.trellix.com/bundle/trellix-agent-5.7.x-installation-guide/page/GUID-5E215352-6764-476B-...

[User16096767]

We still have this issue. We are unable to upgrade from epo because of this issue. SR has been escalated to Development team three months ago.

[cdinet]

can you send me your SR number in private chat please?

[User16096767]

@neutronscott  Thank you for your suggestion. We tested on a couple of servers and in both cases, the error went away and the agent communicated fine.

The question is  what is in MAProvision rpm that is causing 505 error? This question is really for Trellix Development team. 

[cdinet]

DXL component needs to be added separately per https://docs.trellix.com/bundle/trellix-agent-5.7.x-installation-guide/page/GUID-5E215352-6764-476B-...

Create the MFEdx-ma-<build_number>.rpm file

maprovision tries to provision the agent to epo and if all required files aren't there where expected to be, it may fail.  

Do you have all the required files?

MAProvision.rpm, MFEma.rpm, MFErt.rpm, and MFEdx-ma-<build_number>.rpm