Fix: McAfee ePo Error “Server Policy Invalid”


The following entries were found in the C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Db\Agent_servername.log file on my Windows 2003 server:

20090709133245 I #1972 InetMgr Adding site ePO_mysite to failover list.
20090709133245 I #1972 InetMgr After calling UploadFileResponse()
20090709133245 i #1972 Agent Package uploaded to ePO Server successfully
20090709133245 i #1972 Agent Agent communication session closed
20090709133245 i #1972 Agent Agent received POLICY package from ePO server
20090709133245 I #1972 Agent Started processing a package..
20090709133245 I #1972 Agent Processing PropsResponse package
20090709133245 I #1972 Agent Looking for new sitelist from server
20090709133245 i #1972 Agent New Site List file was received
20090709133245 I #1972 Agent Looking for new event filter from server
20090709133245 I #1972 Agent Looking for new policy from server
20090709133245 I #1972 IPLock writeLock – providing write lock
20090709133245 E #1972 Xml Error trace:
20090709133245 E #1972 MgRcSvX [Merge server.xml]->
20090709133245 E #1972 Xml [useExistingFile,C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Server.xml]->
20090709133245 E #1972 Xml [ReadBufferFromFileNoExp,C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework\Server.xml]->
20090709133245 E #1972 Xml Couldn’t convert to Unicode
20090709133245 I #1972 IPLock writeUnLock – unlocking the write lock successful
20090709133245 e #1972 Agent New server policy was NOT successfully merged
20090709133245 i #1972 Agent Enforcing newly downloaded policies
20090709133245 I #1972 Agent Agent Enforce Policy Interface called
20090709133245 i #1988 Agent Agent Started Enforcing policies
20090709133245 I #1988 Agent Thread signal occurred
20090709133245 I #1988 Manage Enforcing policies
20090709133245 i #1972 Agent Agent will connect to the ePO Server in 60 minutes and 0 seconds.
20090709133245 I #1988 IPLock writeLock – providing write lock
20090709133245 i #1988 Manage Compiling policies
20090709133245 I #1988 Manage CPolicyFile::InitializePolicyFiles() – Server policy invalid
20090709133245 I #1988 Manage Compiling Policies FAILED, result=-3
20090709133245 I #1988 IPLock writeUnLock – unlocking the write lock successful
20090709133245 I #1988 Agent Agent policy enforcement failed, result=-3
20090709133245 i #1988 Agent Agent finished Enforcing policies
20090709133245 i #1988 Agent Next policy enforcement in 5 minutes
20090709133300 i #1988 Agent Agent Started Enforcing policies
20090709133300 I #1988 Agent Thread signal occurred
20090709133300 I #1988 Manage Enforcing policies
20090709133300 I #1988 IPLock writeLock – providing write lock
20090709133300 i #1988 Manage Compiling policies
20090709133300 I #1988 Manage CPolicyFile::InitializePolicyFiles() – Server policy invalid
20090709133300 I #1988 Manage Compiling Policies FAILED, result=-3

The Solution

1. Stop the McAfee Framework Service

2. In the C:\Documents and Settings\All Users\Application Data\McAfee\Common Framework directory delete the following two files:

server.xml
compiled.xml

3. Restart the McAfee Framework Service

4. Perform Agent wakeup per KB52707 by executing

C:\Program Files\Common Framework\cmdagent.exe /C

This command checks for new policies/tasks

See McAfee KB60422 for additional details

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: