McAfee Endpoint Security

Transcription

1 Release Notes September Update McAfee Endpoint Security For use with epolicy Orchestrator Contents Rating Resolved issues Installation instructions Note: If the versions of is prior to September 18 th, 2018 please review the Install the update on your McAfee epo server instructions below. Rating The rating defines the urgency for installing this update. Rating Critical Mandatory Critical High Priority Recommended Critical for all environments. Failure to apply a Critical update might result in severe business impact. An Update for a Severity 1 or Severity 2 issue is considered Critical. For more information, see KB Important The attached files are provided as is, and with no warranty either expressed or implied as to their suitability for any particular use or purpose. McAfee assumes no liability for damages incurred either directly or indirectly as a result of the use of these files, including but not limited to the loss or damage of data or systems, loss of business or revenue, or incidental damages arising from their use. Update files should be applied only on the 1

2 advice of Technical Support, and only when you are actually experiencing the issue being addressed by the update. Update files should not be proactively applied in order to prevent potential product issues. You are responsible for reading and following all instructions for preparation, configuration, and installation of update files. Update files are not a substitute or replacement for product Service Packs, which may be released by McAfee. It is a violation of your software license agreement to distribute or share these files with any other person or entity without written permission from McAfee. Further, posting of McAfee update files to publicly available Internet sites is prohibited. McAfee reserves the right to refuse distribution of update files to any company or person guilty of unlawful distribution of McAfee software products. Questions or issues with McAfee update files should be directed to Technical Support. Resolved issues This release resolves known issues from the previous releases of the product. For a list of current known issues, see McAfee Endpoint Security September Update Known Issues (KB90822, KB90301). Installation A blue screen associated with mfeaack.sys no longer occurs A blue screen no longer occurs when upgrading from McAfee VirusScan Enterprise to Endpoint Security. Platform You can no longer use icacls to disable Endpoint Security modules Security status no longer shows point products as disabled randomly. Firewall Firewall rules no longer fail to save due to java.sql.sqlexception: Violation of UNIQUE KEY constraint 'IX_EPOPolicySettings_TenantTypeIDName' errors Changes made to firewall rules now persist when entering sub dialogs or making changes to a rule prior to saving it and going back to the Firewall policy view in McAfee epo Log entries for allowed and blocked traffic now successfully generate when Network Intrusion Prevention is enabled Firewall Rule queries with a Rule Action filter now return the correct results. 2

3 Threat Prevention Uploading a file using Rockwell FactoryTalk with Endpoint Security installed now takes less time A third-party application installation is no longer affected if On-Access Scan is enabled Exploit Prevention no longer causes Microsoft Office applications and Internet Explorer to crash When On-Access Scan is enabled, Rockwell Software Logix Designer 30 no longer takes several minutes to compile A bug check 1A no longer occurs when Endpoint Security is installed A third-party software installation is now successful when Threat Prevention is installed The CPU utilization when On-Demand Scan is running is now reduced You can now enter individual IP addresses when adding Network IPS exclusions in the Exploit Prevention policy. Adaptive Threat Protection Files with Unknown reputations are no longer repeatedly sent to McAfee Advanced Threat Defense for analysis after the initial transmission. Installation instructions For information about installing or upgrading Endpoint Security software, see the McAfee Endpoint Security Installation Guide. Requirements Make sure that your system meets these requirements before installing the software. McAfee Endpoint Security must be installed on your system. Administrator privileges are required to install this update. AMCore content up to date. Endpoint Security posted prior to September 11, 2018 are as mentioned below: Component Version (RTW) 3

4 Endpoint Security Platform Endpoint Security Firewall Endpoint Security Threat Prevention Endpoint Security Web Control Endpoint Security Adaptive Threat Protection Endpoint Security Platform extension Endpoint Security Threat Prevention extension Endpoint Security Firewall extension Endpoint Security Web Control extension Endpoint Security Adaptive Threat Protection extension Endpoint Security September Update lists these products and versions in the Master Repository on the McAfee epo server. Product Type Version Minor version Endpoint Security Platform Hotfix Endpoint Security Firewall Hotfix Endpoint Security Threat Prevention Hotfix Endpoint Security Web Control Hotfix Endpoint Security Adaptive Threat Protection Hotfix Endpoint Security September Update posted September 11, 2018 are as mentioned below: Component Version Endpoint Security Platform Endpoint Security Firewall Endpoint Security Threat Prevention Endpoint Security Web Control Endpoint Security Adaptive Threat Protection Endpoint Security September Update posted September 18 th, 2018 lists these products and versions in the About dialog box of Endpoint Security, and McAfee epo product properties. Product Version Hotfix number Endpoint Security Platform

5 Endpoint Security Firewall Endpoint Security Threat Prevention Endpoint Security Web Control Endpoint Security Adaptive Threat Protection Install the update on your McAfee epo server The modules that are installed on your system determine which updates are installed. Task 1 Log on to McAfee epo as administrator. 2 From the Software Manager, check in these packages: a. McAfee Endpoint Security September Update b. Endpoint Security Adaptive Threat Protection September Update c. Endpoint Security Adaptive Threat Protection September Update extension 3 From the Product download site, download and check these packages in McAfee epo. Note: You must check in Endpoint Security Platform first. Endpoint_Security_Platform_ _Sep_Update_ zip Firewall_ _Sep_Update_ zip Threat_Prevention_ _Sep_Update_ zip Web_Control_ _Sep_Update_ zip Adaptive_Threat_Protection_ _ Sep_Update_ zip Note: If the versions of September Update September 11 th, 2018 are already installed on the machine, During the check in process a message is prompted stating Another package (version ) already exists in this branch. Checking in to this branch will overwrite the existing package. Continue the checking process by clicking the Save button. 4 Download and check these packages in to McAfee epo. Note: The Endpoint Security Platform extension must be checked in first. Endpoint_Security_Platform _ _Sep_Update_extension.zip Firewall_ _Sep_Update_extension.zip Threat_Prevention_ _ Sep_Update_extension.zip Web_Control_ _ Sep_Update_extension.zip Adaptive_Threat_Protection_ _ Sep_Update_extension.zip 5 In the Client Task Catalog, create a McAfee Agent: Product Update task. 5

6 6 From the Patches and service packs section, select the Endpoint Security modules. Note: You do not need to select the Endpoint Security Platform module; it automatically updates before the first Endpoint Security module update. 7 Assign the update task. 8 Send a McAfee Agent wake-up call, then select Force complete policy and task update so the task runs on the client. Otherwise, the task will run at the next agent-server communication interval. Install the update on self-managed systems Task 1 Download and unzip the EndpointInstaller_ _Sep_Update.zip file to a temporary folder on your system. 2 Double-click the setupep_hf.exe file and follow the instructions. 3 (Optional) Download and install Adaptive Threat Protection: a. Download and unzip the Adaptive_Threat_Protection_ _ Sep_Update_ zip to a temporary folder on your system. b. Double-click the setupatp.exe file. Verify that the update installed correctly From the client system The installed update isn t listed in the default Programs and Features list in the Control Panel. To verify that the update installed correctly or to view details about the update: From the Control Panel on the client system, select View Installed Updates. You can view the update details by selecting About in the Endpoint Security Client. From McAfee epo To verify that the update installed correctly or to view details about the update: From the System Tree, select the system, click Products, then view the Properties. Notes Removing the update isn t supported. The update is removed when a module is uninstalled. Copyright 2018 McAfee, LLC McAfee and the McAfee logo are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. 6