                   Release Notes for
          McAfee(R) Common Management Agent(TM)
          Version 3.1, Service Pack 2a, Patch 6
                   Copyright (C) 2004
          Networks Associates Technology, Inc.
                  All Rights Reserved

__________________________________________________________


Thank you for using the McAfee(R) Common Management
Agent(TM) software. This file contains important
information regarding this release. We strongly
recommend that you read the entire document.


IMPORTANT:
McAfee Security does not support automatic
upgrading of a pre-release version of the
software (beta or release candidate). To upgrade
to a production release of the software, you
must first uninstall the existing version of the
software.

__________________________________________________________

-   About This Release
-   Purpose
-   Resolved Issues
-   Previously Resolved Issues
-   Files Included with This Release
-   Installation
-   Installation Requirements
-   Installation Steps
-   Checking the Agent Package into the Master
Repository
-   Creating the New Agent Installation Package
-   Replicating the Agent Package to Distributed
Repositories
-   Deploying the agent to client computers
-   Monitoring Agent Deployment
-   Participating in the McAfee Security Beta
Program
-   Contacting McAfee Security and Network
Associates
-   Copyright, Trademark Attributions & Patents
-   Trademarks
-   License Agreement and Attributions
-   Patents

__________________________________________________________
IMPORTANT NOTE

We strongly recommend that you install Service
Pack 2 for ePolicy Orchestrator software before
you install this release. You can download the
Service Pack from the McAfee Security web site
at:

https://secure.nai.com/us/forms/downloads/upgrades/login.asp


You will need to supply your customer grant
number or user name and password to access this
site.


__________________________________________________________
ABOUT THIS RELEASE


PURPOSE

This patch replaces the Common Management Agent
3.1.2 to resolve the issues listed below. This is
intended for ePolicy Orchestrator 3.0.2 customers.


RESOLVED ISSUES

1.  ISSUE:
    Task names containing "% s" cause the framework
    service to crash and tasks do not run.

    RESOLUTION:
    Task names can now contain "% s".

    NOTE:
    As a small side-effect of this fix, clients with
    task names containing "`p`" will see it
    converted to "%" when displayed.

2.  ISSUE:
    Under some circumstances, the scheduler could
    crash after a machine has been off for more than
    1 day.

    RESOLUTION:
    Improvements have been made to the handling of
    threads in the scheduler and this issue should
    not happen.

3.  ISSUE:
    Upgrading a 2.5.1 agent to 3.X does not maintain
    the same GUID.

    RESOLUTION:
    The agent GUID is now saved when upgrading a
    2.5.1 agent to a 3.X agent.

4.  ISSUE:
    A distributed repository whose name is a subset
    of a master repository name, becomes disabled
    when the master repository is marked disabled.

       EXAMPLE:
       Master repository name – ePOmasterrepository
       Distributed repository name – repository

    RESOLUTION:
    The distributed repository will no longer become
    disabled if the master repository is set to
    disabled.

5.  ISSUE:
    Installing the agent to a French Canadian
    language pack installs in English not French.

    RESOLUTION:
    Installs on a French Canadian language pack are
    now in French.

6.  ISSUE:
    Installation failure on terminal servers when
    upgrading a 2.5.1 agent.

    RESOLUTION:
    The installation of the 3.1.2 agent will now
    upgrade a 2.5.1 agent on a terminal server.



PREVIOUSLY RESOLVED ISSUES

1.  ISSUE:
    Updating from a mirrored UNC repository could
    fail because extra data may be added to the end
    of some files.

    RESOLUTION:
    Extra data is no longer added to the end of
    files
    during mirrored UNC repository updating.

2.  ISSUE:
    Updates from a FTP server that include a sign on
    banner that begins with more than 4 blank spaces
    will fail. The FTP login failed.

    RESOLUTION:
    The agent can now login to a FTP server with a
    sign on banner that begins with 4 blank spaces.

3.  ISSUE:
    Install VS 7.x or the ePO agent on an XP SP2
    system will result in update failures. This is
    due to the new blank default security settings
    in DCOMCNFG.

    RESOLUTION:
    In supporting Microsoft's effort to increase
    security, NAI will now set the appropriate
    security settings at install time.

    HOW TO QUALIFY FOR THIS:
    Install VS 7.x and receive a COM error during an
    update. DCOMCNFG should have nothing listed for
    Access permissions or Launch/Activation
    permissions. Adding SYSTEM and INTERACTIVE to
    the default security will enable updating to
    work.

4.  ISSUE:
    During a scheduled update, scheduled ePO task or
    a normal ePO communications, a stack error
    occurs in the AGENT_<computername>.log. These
    are rare situations when multiple threads
    accessing the same .XML file and will make CMA
    unstable.

    RESOULTION:
    CMA will now allow for better .XML handling.

    HOW TO QUALIFY FOR THIS:
    Look for stack errors in the
    AGENT_<computername>.log

5.  ISSUE:
    Autoupdates or Replication tasks to an FTP
    server could hang or fail due to commands
    getting out of order. This was due to responses
    coming back from the FTP or Proxy that CMA was
    not expecting.

    RESOULTION:
    CMA will now no longer hang or fail if the FTP
    communications are not what we expect.

    HOW TO QUALIFY FOR THIS:
    Look for FTP communications that seem to hang
    after an Autoupdate or a Logon during an
    Autoupdate. One symptom is this happening during
    very busy Proxy or Network traffic and us
    failing WinInet and using Windows Socket
    communication.

6.  ISSUE:
    CMA could appear to be in a high CPU state or
    log a crash in the Agent_<computername>.log if
    the sitelist.xml becomes corrupt.

    RESOULTION:
    CMA will now handle these situations and either
    resolve the issue by recreating the sitelist.xml
    from ePO or log an error.

    HOW TO QUALIFY FOR THIS:
    Deleting the sitelist.xml file seems to make the
    issue go away permanently.

7.  ISSUE:
    Replication of 0-byte files could occur under a
    number of situations. This could cause products
    to not replicate or update errors with older
    products such as VirusScan 4.5.1 to a ePO 3.x
    repository.

    RESOULTION:
    The Framework service will now properly handle
    any transfers of 0-byte files through its
    Replication and Pull tasks.

    HOW TO QUALIFY FOR THIS:
    The Pull task will error on a file that is
    0-byte while still copying that file to the
    repository for Replication. NAI has also seen
    VirusScan product replications fail due to
    0-byte files being replicated.

8.  ISSUE:
    During a scheduled update, scheduled ePolicy
    Orchestrator task or a normal ePolicy
    Orchestrator communications, a stack error
    sometimes occurred in the
    AGENT_<computername>.log.

    RESOULTION:
    CMA no longer produces stack errors during these
    operations.

9.  ISSUE:
    Auto-updates or Replication tasks to an FTP
    server sometimes stopped responding, or failed,
    due to commands being in a different order than
    what the update task expected.

    RESOULTION:
    CMA will no longer stops responding or fails if
    the FTP or Proxy response is not what the update
    task is expecting.

10. ISSUE:
    Replication of 0-byte files sometimes occurred.
    This caused products to not replicate correctly,
    or caused update errors with older products such
    as VirusScan 4.5.1 to a ePolicy Orchestrator 3.x
    repository.

    RESOULTION:
    The Framework service now properly handles any
    transfers of 0-byte files through its
    Replication and Pull tasks.

11. ISSUE:
    UNC/DFS updates were unresponsive or not
    complete under some circumstances.

    RESOULTION:
    UNC/DFS now handles different network
    configurations correctly.



FILES INCLUDED WITH THIS RELEASE

This release consists of a package called
CMA3126.ZIP, which contains the following files:

    FRAMEPKG.EXE
    README.TXT


__________________________________________________________
INSTALLATION


INSTALLATION REQUIREMENTS

To use this release, you must have VirusScan 7.0, 
VirusScan 7.1, Groupshield 6.0 or McAfee Desktop Firewall 
8.0 installed on the computer you intend to update with 
this release.

    NOTE:
    This release does not work with earlier versions of 
    VirusScan, Groupshield or McAfee Desktop Firewall 
    software. This release is not intended to be installed 
    directly on an ePolicy Orchestrator Server.


INSTALLATION STEPS

1. Extract the Patch files from CMA3126.ZIP to a temporary 
   folder on your hard drive.

2. Open a command line window.

3. Change the path to where the temporary folder you created is.

4. Type in the command FramePKG.exe /install=updater

5. If you want the installation to be silent the command is 
   FramePKG.exe /install=updater /silent 


REMOVING THIS RELEASE

To remove this Patch from your computer, uninstall, then reinstall 
all McAfee software from the client computer.

   NOTE:
   We recommend that you do NOT remove the Patch files from your 
   client installation once you install them. If you reinstall your 
   software, we recommend that you also reinstall the Patch.

The new agent version number is 3.1.2.273.


_________________________________________________________
PARTICIPATING IN THE MCAFEE SECURITY BETA PROGRAM

To download new beta software or to read about the
latest beta information, visit the beta web site:

http://www.networkassociates.com/us/downloads/beta/

To submit your feedback on any McAfee Security beta
product, send e-mail to:

avbeta@nai.com

McAfee Security is devoted to providing solutions
based on your input.


__________________________________________________________
CONTACTING MCAFEE SECURITY & NETWORK ASSOCIATES

Technical Support
Home Page
http://www.networkassociates.com/us/support/

KnowledgeBase Search
https://knowledgemap.nai.com/phpclient/homepage.aspx

PrimeSupport Service Portal
http://mysupport.nai.com

Login credentials required.


McAfee Security Beta Program
Beta Web Site
http://www.networkassociates.com/us/downloads/beta/

E-mail
avbeta@nai.com


Security Headquarters -- AVERT (Anti-Virus
Emergency
Response Team)
Home Page
http://www.networkassociates.com/us/security/home.asp

Virus Information Library
http://vil.nai.com

Submit a Virus Sample – AVERT WebImmune
https://www.webimmune.net/default.asp

AVERT DAT Notification Service
http://vil.nai.com/vil/join-DAT-list.asp


Download Site
Home Page
http://www.networkassociates.com/us/downloads/

DAT File and Engine Updates
http://www.networkassociates.com/us/downloads/updates/

ftp://ftp.nai.com/pub/antivirus/datfiles/4.x

Product Upgrades
https://secure.nai.com/us/forms/downloads/upgrades/login.asp

Valid grant number required.
Contact Network Associates Customer Service


Training
McAfee Security University
http://www.networkassociates.com/us/services/education/mcafee/university.htm



Network Associates Customer Service
US, Canada, and Latin America toll-free:
Phone:     +1-888-VIRUS NO or +1-888-847-8766
Monday - Friday, 8 a.m. - 8 p.m.,
Central Time

E-mail:    services_corporate_division@nai.com
Web:       http://www.nai.com/us/index.asp
http://www.networkassociates.com/us/index.asp


For additional information on contacting Network
Associates and McAfee Security – including
toll-free
numbers for other geographic areas - see the
CONTACT
file that accompanied your original product
release.




__________________________________________________________
COPYRIGHT, TRADEMARK ATTRIBUTIONS & PATENTS

COPYRIGHT
Copyright (C) 2004 Networks Associates Technology,
Inc. All Rights Reserved. No part of this
publication may be reproduced, transmitted,
transcribed, stored in a retrieval system, or
translated into any language in any form or by any
means without the written permission of Networks
Associates Technology, Inc., or its suppliers or
affiliate companies. To obtain this permission,
write to the attention of the Network Associates
legal department at: 5000 Headquarters Drive,
Plano,
Texas 75024, or call +1-972-963-8000.


TRADEMARK ATTRIBUTIONS
Active Firewall, Active Security, ActiveSecurity
(in
Katakana), ActiveHelp, ActiveShield, AntiVirus
Anyware and design, Bomb Shelter, Certified Network
Expert, Clean-Up, CleanUp Wizard, ClickNet, CNX,
CNX
Certification Certified Network Expert and design,
Covert, Design (Stylized E), Design (Stylized N),
Disk Minder, Distributed Sniffer System,
Distributed
Sniffer System (in Katakana), Dr Solomon’s, Dr
Solomon’s label, Entercept, Enterprise SecureCast,
Enterprise SecureCast (in Katakana), ePolicy
Orchestrator, EZ SetUp, First Aid, ForceField, GMT,
GroupShield, GroupShield (in Katakana), Guard Dog,
HomeGuard, Hunter, IntruShield, Intrusion
Prevention
Through Innovation, IntruVert Networks, LANGuru,
LANGuru (in Katakana), M and Design, McAfee, McAfee
(in Katakana), McAfee and design, McAfee.com,
McAfee
VirusScan, NA Network Associates, Net Tools, Net
Tools (in Katakana), NetCrypto, NetOctopus,
NetScan,
NetShield, NetStalker, Network Associates, Network
Associates Coliseum, NetXray, NotesGuard, Nuts &
Bolts, Oil Change, PC Medic, PCNotary,
PrimeSupport,
Recoverkey, Recoverkey - International, Registry
Wizard, RingFence, Router PM, SecureCast,
SecureSelect, Sniffer, Sniffer (in Hangul),
SpamKiller, Stalker, TIS, TMEG, Total Network
Security, Total Network Visibility, Total Network
Visibility (in Katakana), Total Virus Defense,
Trusted Mail, UnInstaller, Virex, Virus Forum,
ViruScan, VirusScan, WebScan, WebShield, WebShield
(in Katakana), WebSniffer, WebStalker, WebWall,
What’s The State Of Your IDS?, Who’s Watching Your
Network, WinGauge, Your E-Business Defender, Zip
Manager are registered trademarks or trademarks of
Network Associates, Inc. and/or its affiliates in
the US and/or other countries.  Sniffer(R) brand
products are made only by Network Associates, Inc.
All other registered and unregistered trademarks
herein are the sole property of their respective
owners.


LICENSE INFORMATION
License Agreement
NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE
LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU
PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND
CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF
YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE
ACQUIRED, PLEASE CONSULT THE SALES AND OTHER
RELATED
LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT
ACCOMPANIES YOUR SOFTWARE PACKAGING OR THAT YOU
HAVE
RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A
BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE
AVAILABLE ON THE WEB SITE FROM WHICH YOU DOWNLOADED
THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL
OF
THE TERMS SET FORTH IN THE AGREEMENT, DO NOT
INSTALL
THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE
PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF
PURCHASE FOR A FULL REFUND.

Attributions
This product includes or may include:
* Software developed by the OpenSSL Project for use
in the OpenSSL Toolkit (http://www.openssl.org/).
* Cryptographic software written by Eric A. Young
and software written by Tim J. Hudson. * Some
software programs that are licensed (or
sublicensed)
to the user under the GNU General Public License
(GPL) or other similar Free Software licenses
which,
among other rights, permit the user to copy, modify
and redistribute certain programs, or portions
thereof, and have access to the source code. The
GPL
requires that for any software covered under the
GPL
which is distributed to someone in an executable
binary format, that the source code also be made
available to those users. For any such software
covered under the GPL, the source code is made
available on this CD. If any Free Software licenses
require that Network Associates provide rights to
use, copy or modify a software program that are
broader than the rights granted in this agreement,
then such rights shall take precedence over the
rights and restrictions herein. * Software
originally written by Henry Spencer, Copyright
1992,
1993, 1994, 1997 Henry Spencer. * Software
originally written by Robert Nordier, Copyright (C)
1996-7 Robert Nordier. * Software written by
Douglas
W. Sauder. * Software developed by the Apache
Software Foundation (http://www.apache.org/). A
copy
of the license agreement for this software can be
found at www.apache.org/licenses/LICENSE-2.0.txt.
* International Components for Unicode ("ICU")
Copyright (C) 1995-2002 International Business
Machines Corporation and others. * Software
developed by CrystalClear Software, Inc., Copyright
(C) 2000 CrystalClear Software, Inc. * FEAD(R)
Optimizer(R)  technology, Copyright Netopsystems
AG,
Berlin, Germany. * Outside In(R)  Viewer Technology
(C) 1992-2001 Stellent Chicago, Inc. and/or Outside
In(R)  HTML Export, (C) 2001 Stellent Chicago, Inc.
* Software copyrighted by Thai Open Source Software
Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000.
* Software copyrighted by Expat maintainers.
* Software copyrighted by The Regents of the
University of California, (C) 1989.  * Software
copyrighted by Gunnar Ritter. * Software
copyrighted
by Sun Microsystems(R), Inc. (C) 2003. * Software
copyrighted by Gisle Aas. (C) 1995-2003. * Software
copyrighted by Michael A. Chase, (C) 1999-2000.
* Software copyrighted by Neil Winton, (C)
1995-1996. * Software copyrighted by RSA Data
Security, Inc., (C) 1990-1992. * Software
copyrighted by Sean M. Burke, (C) 1999, 2000. *
Software copyrighted by Martijn Koster, (C) 1995. *
Software copyrighted by Brad Appleton, (C)
1996-1999.  * Software copyrighted by Michael G.
Schwern, (C) 2001.
* Software copyrighted by Graham Barr, (C) 1998.
* Software copyrighted by Larry Wall and Clark
Cooper, (C) 1998-2000. * Software copyrighted by
Frodo Looijaard, (C) 1997. * Software copyrighted
by
the Python Software Foundation, Copyright (C) 2001,
2002, 2003. A copy of the license agreement for
this
software can be found at www.python.org. * Software
copyrighted by Beman Dawes, (C) 1994-1999, 2002.
* Software written by Andrew Lumsdaine, Lie-Quan
Lee, Jeremy G. Siek (C) 1997-2000 University of
Notre Dame. * Software copyrighted by Simone Bordet
& Marco Cravero, (C) 2002. * Software copyrighted
by
Stephen Purcell, (C) 2001. * Software developed by
the Indiana University Extreme! Lab
(http://www.extreme.indiana.edu/). * Software
copyrighted by International Business Machines
Corporation and others, (C) 1995-2003. * Software
developed by the University of California, Berkeley
and its contributors. * Software developed by Ralf
S. Engelschall <rse@engelschall.com> for use in the
mod_ssl project (http://www.modssl.org/). *
Software
copyrighted by Kevlin Henney, (C) 2000-2002. *
Software copyrighted by Peter Dimov and Multi Media
Ltd. (C) 2001, 2002. * Software copyrighted by
David
Abrahams, (C) 2001, 2002. See
http://www.boost.org/libs/bind/ bind.html for
documentation. * Software copyrighted by Steve
Cleary, Beman Dawes, Howard Hinnant & John Maddock,
(C) 2000. * Software copyrighted by Boost.org, (C)
1999-2002. * Software copyrighted by Nicolai M.
Josuttis, (C) 1999. * Software copyrighted by
Jeremy
Siek, (C) 1999-2001. * Software copyrighted by
Daryle Walker, (C) 2001. * Software copyrighted by
Chuck Allison and Jeremy Siek, (C) 2001, 2002. *
Software copyrighted by Samuel Krempp, (C) 2001.
See
http://www.boost.org for updates, documentation,
and
revision history. * Software copyrighted by Doug
Gregor (gregod@cs.rpi.edu), (C) 2001, 2002. *
Software copyrighted by Cadenza New Zealand Ltd.,
(C) 2000. * Software copyrighted by Jens Maurer,
(C)
2000, 2001. * Software copyrighted by Jaakko Järvi
(jaakko.jarvi@cs.utu.fi), (C) 1999, 2000. *
Software
copyrighted by Ronald Garcia, (C) 2002. * Software
copyrighted by David Abrahams, Jeremy Siek, and
Daryle Walker, (C) 1999-2001. * Software
copyrighted
by Stephen Cleary (shammah@voyager.net), (C) 2000.
*
Software copyrighted by Housemarque Oy <http://
www.housemarque.com>, (C) 2001. * Software
copyrighted by Paul Moore, (C) 1999. * Software
copyrighted by Dr. John Maddock, (C) 1998-2002. *
Software copyrighted by Greg Colvin and Beman
Dawes,
(C) 1998, 1999. * Software copyrighted by Peter
Dimov, (C) 2001, 2002. * Software copyrighted by
Jeremy Siek and John R. Bandela, (C) 2001. *
Software copyrighted by Joerg Walter and Mathias
Koch, (C) 2000-2002.



Version 2.3.2
