Re: [foxboro] McAfee virusscan enterprise 8.7.0 errors autoupdate

  • From: dirk.pauwels@xxxxxxxxxx
  • To: foxboro@xxxxxxxxxxxxx
  • Date: Wed, 28 Apr 2010 16:34:58 +0200

Hi Jack,
We had following errors:

2010-02-18 02:06:28 SW0002 Station  SYSMON -00030 No Short-Term Reports 
Received
2010-02-18 02:06:28 SW0002 Station  SYSMON -00043 Equipment failed
2010-02-18 02:06:28 SW0003 Station  SYSMON -00030 No Short-Term Reports 
Received
2010-02-18 02:06:28 SW0003 Station  SYSMON -00043 Equipment failed
2010-02-18 02:06:28 AW7001 Station  SYSMON -00030 No Short-Term Reports 
Received
2010-02-18 02:06:28 AW7001 Station  SYSMON -00043 Equipment failed
2010-02-18 02:06:33 SW0003 Station  SYSMON -00041 Equipment on-line
2010-02-18 02:06:33 SW0002 Station  SYSMON -00041 Equipment on-line

On a small system like ours it was immediately clear this had something to 
do with the symantec tasks, because this was the only job running at that 
time.
The errors didn't effect operations,  but it fills up the sysmon file and 
you can easlily miss the really important errors.....

Service tech Hans from Invensys Belgium solved it for us by downtuning the 
performance of the symantec backup task (tasks - options-performance). We 
haven't had this type of errors since then.  Unfortunately I can't do the 
same with the virus update it seems...

Rgds,

Dirk 



<Jack.Easley@xxxxxxxxxxxx> 
Sent by: foxboro-bounce@xxxxxxxxxxxxx
28/04/2010 14:50
Please respond to
foxboro@xxxxxxxxxxxxx


To
<foxboro@xxxxxxxxxxxxx>
cc

Subject
Re: [foxboro] McAfee virusscan enterprise 8.7.0 errors autoupdate






Dirk,

Would you share with us the issues you had in the past with Symantec
Backup Exec causing System Monitor alarms? We use Symantec extensively
and also have random momentary System Monitor alarms, but they are
mostly associated with CPs and FDSIs. We also had this problem before we
started actually using scheduled backups, so I've never suspected
Symantec.

Jack Easley
Sr. I&C Technician
Luminant Power, Martin Lake Plant
Phone 903.836.6273
jack.easley@xxxxxxxxxxxx 


-----Original Message-----
From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx]
On Behalf Of dirk.pauwels@xxxxxxxxxx
Sent: Wednesday, April 28, 2010 3:34 AM
To: foxboro@xxxxxxxxxxxxx
Subject: [foxboro] McAfee virusscan enterprise 8.7.0 errors autoupdate

Hi list,

We have an Aw70 as mesh server, 8.4.2 with McAfee virusscan enterprise 
8.7.0. Autoupdate is enabled, we have a global EPO server.

We notice each time the autoupdate is running (when it's almost
finished) 
an error in sysmon regarding one or more of the enterasys switches:

2010-04-28 01:12:27 SW0001 Station  SYSMON -00030 No Short-Term Reports 
Received
2010-04-28 01:12:27 SW0001 Station  SYSMON -00043 Equipment failed
2010-04-28 01:12:35 SW0001 Station  SYSMON -00041 Equipment on-line

It's not always the same switch, sometimes more than one, sometime no 
error msg at all.

It has something to do with the autoupdate, cause that's the only
"action" 
taking place at that time. When I disable autoupdate we do not get
errors. 
We had errors caused by symantec backup also, but that's solved. Is
there 
a way to avoid these errors by "tuning" the McAfee? 

Thanks & rgds,

Dirk

 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             //www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
 


Confidentiality Notice: This email message, including any attachments, 
contains or may contain confidential information intended only for the 
addressee. If you are not an intended recipient of this message, be 
advised that any reading, dissemination, forwarding, printing, copying
or other use of this message or its attachments is strictly prohibited. If
you have received this message in error, please notify the sender 
immediately by reply message and delete this email message and any
attachments from your system. 
 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             //www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
 



 
 
_______________________________________________________________________
This mailing list is neither sponsored nor endorsed by Invensys Process
Systems (formerly The Foxboro Company). Use the info you obtain here at
your own risks. Read http://www.thecassandraproject.org/disclaimer.html
 
foxboro mailing list:             //www.freelists.org/list/foxboro
to subscribe:         mailto:foxboro-request@xxxxxxxxxxxxx?subject=join
to unsubscribe:      mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave
 

Other related posts: