[cisco-voip] Mcafee 8.0 and CM CSA Conflict - McShield service terminating

[Erick Bergquist]

It looks like applying patch 11 for Mcafee virusscan 8.0i enterprise clears this issue up, at least in this instance.

I tried to duplicate the issue on some lab servers with various mcafee versions and CSA and was unable to. Had customer update to patch 11 version - they were on patch 1, and I have not been able to recreate the issue. Before updating, I could recreate the errors and service crash by just stopping and starting the Mcshield service with CSA already started and it would have issues below each time. 

----- Original Message ----
From: Ryan Ratliff <rratliff at cisco.com>
To: Erick Bergquist <erickbe at yahoo.com>
Cc: ciscovoip <cisco-voip at puck.nether.net>
Sent: Wednesday, May 24, 2006 10:53:54 AM
Subject: Re: [cisco-voip] Mcafee 8.0 and CM CSA Conflict - McShield service terminating

I see a similar TAC SR open currently but no bug filed.  If you can  
reproduce with the latest CSA please open a TAC case.

-Ryan

On May 24, 2006, at 10:56 AM, Erick Bergquist wrote:

I am seeing a conflict between McAfee VirusScan Enterprise v8.0.0  
patch version 1 and CSA v4.5.1 build 639.

When the network associates McShield service starts when CSA is  
started , the McShield service terminates unexpectedly a couple dozen  
times. This is causing other cisco call manager related services to  
get briefly hung up on the server also.

If I stop CSA, then start McShield, then start CSA after McShield is  
started all appears to be fine.

I have done several bug searches and come up empty. I am planning on  
applying latest CSA on call manager but can't find anything yet that  
confirms a newer CSA fixes this or not.



Was curious if anyone here  had ran into this or not..

Event Type:    Information
Event Source:    CSAgent
Event Category:    Local Event Mgr
Event ID:    256
Date:        5/24/2006
Time:        12:02:40 AM
User:        N/A
Computer:    CCM
Description:
[2006-05-24 00:02:40.575] [PID=8208] [AgentUI]: listener_th: It took  
too long (88672 millisec) to process event with code=650: type=EVTM  
EvSrcComp=6 EvDstComp=4 EvCode=AUI_AGENT_STATUS_UPDATE

Event Type:    Information
Event Source:    CSAgent
Event Category:    Local Event Mgr
Event ID:    256
Date:        5/24/2006
Time:        12:03:00 AM
User:        N/A
Computer:    CCM
Description:
[2006-05-24 00:03:00.826] [PID=8208] [AgentUI]: DIPC_get_unique:  
Failed to write to comp Csamanager on fixed channel Global 
\Csamanager_ch_00000000: 3006


Event Type:    Error
Event Source:    Service Control Manager
Event Category:    None
Event ID:    7031
Date:        5/24/2006
Time:        12:02:42 AM
User:        N/A
Computer:    CCM1
Description:
The Network Associates McShield service terminated unexpectedly. It  
has done this 26 time(s). The following corrective action will be  
taken in 0 milliseconds: No action.

_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip