Rogue Systems - Alien Agent ( After Upgrade and Downgrade RSD)

[wilfredy]

Hi everyone..!!

I just upgraded from RSD 5.0.5 to RSD 5.0.6 ( My Mistake, My Fault 😞 ), after that, errors begun  displaying  on " Detected Systems" page, I couldn't resolve it. Then I removed RSD 5.0.6 ( Extension and Package ), and Installed RSD 5.0.5 again.

The problem Now is lot of Systems are displayed as Rogue (They have Mcafee Agent Installed and have Agent GUID too), and they are displayed as alien Agent.

I cannot deploy Mcafee Agent, due a Restriction Policy, and the systems are in different Domains.

We are running
ePO server 5.3.2
Mcafee Agent 5.6.0.878
VirusScan Enterprise 8.8.0.2024

Any Help Please..!!

[cdinet]

First of all, get away from the .878 build of the agent - it has been pulled for some issues with it flooding events.  Second, check in server settings for the rsd settings for system matching.  If it is seeing an alien agent, perhaps it isn't matching something in the criteria.  For example, if domain name is set and that doesn't exactly match, that may cause it.

[cdinet]

Additionally, go ahead an upgrade the extension only - the 5.0.5 extension also has an issue with something similar.

[wilfredy]

Cdinet, at this moment the extension version installed in our epo server is 5.0.5.140 and Package 5.0.5.130.

[wilfredy]

Hi cdinet

Thanks for replay; I checked the rsd settings for system matching; and it is default settings. Remember the issue begun when uninstalled and installed RSD.

Regards..

[cdinet]

Please open a ticket with McAfee for RSD so we can look into it.  We would need alien agent system mer, one also from epo and the sensor reporting them as alien.

[wilfredy]

we are running ePO server 5.3.2 and EOL ( 31 March 2019), I Think, I cannot Open a Ticket.

[cdinet]

Yes, you can open a ticket because the product you are troubleshooting (rsd) is not eol. 

[wilfredy]

I just Opened a Ticket (4-19877002581)

[wilfredy · Accepted solution]

Hi everyone,

The  Big Solutions" that Mcafee Support gave it to me" Reinstall Mcafee Agent,

Very disappoint about Mcafee Support

Best regards