Filter
Top Products
154
McAfee
®
Host Intrusion Prevention 6.1 Product Guide Host Intrusion Prevention Client
Solaris client
9
Verifying installation files
After an installation, check that all the files were installed in the appropriate directory
on the client. The /
opt/McAfee/hip directory should contain these essential files and
directories:
Installation history is written to
/opt/McAfee/etc/hip-install.log. Refer to this file
for any questions about the installation or removal process of the Host Intrusion
Prevention client.
Verifying client is running
The client might be installed correctly, but you might encounter problems with its
operation. If the client does not appear in the ePO console, for example, check that it
is running, using either of these commands:
/etc/rc2.d/SS99hip status
ps –ef | grep hip.
Client operations issues
The Solaris client has no user interface to troubleshoot operation issues. It does offer
a command-line troubleshooting tool, hipts, located in the /
opt/McAfee/hip directory.
To use this tool, you must provide a Host Intrusion Prevention client password. Use the
default password that ships with the client (abcde12345), or send a Client UI policy to
the client with either an administrator’s password or a time-based password set with
the policy, and use this password.
Use the troubleshooting tool to:
Indicate the logging settings and engine status for the client.
Turn message logging on and off.
Turn engines on and off.
Log on as root and run the following commands to aid in troubleshooting:
File/Directory Name Description
HipClient
HipClient-bin
Solaris client
HipClientPolicy.xml Policy rules
hipts
hipts-bin
Troubleshooting tool
*.so Host Intrusion Prevention and ePO agent shared
object modules
log directory Contains log files: HIPShield.log and HIPClient.log
Run this command... To do this...
hipts status Obtain the current status of the client indicating
which type of logging is enabled, and which
engines are running.
hipts logging on Turn on logging of specific messages types.
hipts logging off Turn off logging of all message types. Logging is off
by default.