Product Guide
Page 4
...Editing user accounts 44 Deleting user accounts 45 6 Setting up permission sets 47 How users, groups, and permission sets fit together 47 Working with permission sets 49 Creating a new permission set 49 Modifying an existing permission set 50 Duplicating a permission set 50 Exporting permission sets 50 Importing permission sets 51 Removing a permission set 51 Deleting permission sets 51 7 Configuring advanced server settings 53 Configuring Active Directory user login 53 Managing ePolicy Orchestrator users with Active Directory 53 Configuring Windows authentication...
...Editing user accounts 44 Deleting user accounts 45 6 Setting up permission sets 47 How users, groups, and permission sets fit together 47 Working with permission sets 49 Creating a new permission set 49 Modifying an existing permission set 50 Duplicating a permission set 50 Exporting permission sets 50 Importing permission sets 51 Removing a permission set 51 Deleting permission sets 51 7 Configuring advanced server settings 53 Configuring Active Directory user login 53 Managing ePolicy Orchestrator users with Active Directory 53 Configuring Windows authentication...
Product Guide
Page 10
... ticketed issues 302 Synchronizing ticketed issues on a schedule 302 Working with ticketing servers 302 Installing extensions for ticketing server 303 Registering and mapping a ticketing server 305 Configuring the field mappings 306 Upgrading a registered ticketing server 308 A Appendix: Maintaining ePolicy Orchestrator Databases 311 Perform regular maintenance of SQL Server databases 311 Backup and restore ePolicy Orchestrator databases 312 Changing SQL Server information 312 Index 315 10 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide
... ticketed issues 302 Synchronizing ticketed issues on a schedule 302 Working with ticketing servers 302 Installing extensions for ticketing server 303 Registering and mapping a ticketing server 305 Configuring the field mappings 306 Upgrading a registered ticketing server 308 A Appendix: Maintaining ePolicy Orchestrator Databases 311 Perform regular maintenance of SQL Server databases 311 Backup and restore ePolicy Orchestrator databases 312 Changing SQL Server information 312 Index 315 10 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide
Product Guide
Page 16
.... 16 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide A McAfee Agent can install in conjunction with minimal bandwidth impact. The central location for Policy Assignment Rules and to extend the advanced reporting tools provided with the McAfee Agent. Local access points strategically placed throughout your managed environment. They can help manage agent communication, load balancing, and product updates. Used to enable automatic user account creation. • SNMP server - This component works in various network locations to help you manage the...
.... 16 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide A McAfee Agent can install in conjunction with minimal bandwidth impact. The central location for Policy Assignment Rules and to extend the advanced reporting tools provided with the McAfee Agent. Local access points strategically placed throughout your managed environment. They can help manage agent communication, load balancing, and product updates. Used to enable automatic user account creation. • SNMP server - This component works in various network locations to help you manage the...
Product Guide
Page 40
... new users' accounts at which events are forwarded by the server when it communicates with browsers. Global Updating Specifies whether and how global updating is used while collecting McAfee Labs security threats. Proxy Settings Specifies the type of trial software. 40 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide Security Keys Specifies and manages the agent-server secure communication keys, and repository keys. Repository Packages Specifies whether any branch. It also specifies the default location where the exported files...
... new users' accounts at which events are forwarded by the server when it communicates with browsers. Global Updating Specifies whether and how global updating is used while collecting McAfee Labs security threats. Proxy Settings Specifies the type of trial software. 40 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide Security Keys Specifies and manages the agent-server secure communication keys, and repository keys. Repository Packages Specifies whether any branch. It also specifies the default location where the exported files...
Product Guide
Page 56
... Software Product Guide This task must first stop the ePolicy Orchestrator service. How you must be prepared. To activate the Windows Authentication page in the interface. 1 From the server console, select Start | Settings | Control Panel | Administrative Tools 2 Select Services. 3 In the Services window, right-click McAfee ePolicy Orchestrator Applications Server and select Stop. 4 Rename Winauth.dll to an individual user, you next open the Server Settings page, a Windows Authentication option appears. Configuring Windows authentication and authorization Use these settings...
... Software Product Guide This task must first stop the ePolicy Orchestrator service. How you must be prepared. To activate the Windows Authentication page in the interface. 1 From the server console, select Start | Settings | Control Panel | Administrative Tools 2 Select Services. 3 In the Services window, right-click McAfee ePolicy Orchestrator Applications Server and select Stop. 4 Rename Winauth.dll to an individual user, you next open the Server Settings page, a Windows Authentication option appears. Configuring Windows authentication and authorization Use these settings...
Product Guide
Page 68
... McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide Do this after importing or generating a new key pair. • Using the same ASSC key pair for all servers and agents on page 70 Follow this process to ensure that were exported from a different McAfee ePO server. in use the same agent-server secure communication (ASSC) key pair. • Using a different ASSC key pair for each McAfee ePO server must have a unique agent-server secure communication key pair. • Viewing systems that server to access this McAfee...
... McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide Do this after importing or generating a new key pair. • Using the same ASSC key pair for all servers and agents on page 70 Follow this process to ensure that were exported from a different McAfee ePO server. in use the same agent-server secure communication (ASSC) key pair. • Using a different ASSC key pair for each McAfee ePO server must have a unique agent-server secure communication key pair. • Viewing systems that server to access this McAfee...
Product Guide
Page 69
...all downloads this file might be automatically saved to access this task to import agent-server secure communication keys that server to that location. in the interface. in the interface. Task 1 Click Menu | Configuration | Server Settings, select Security Keys from the Setting Categories list, then click Edit. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 69 In the dialog box, type the name of the security key. For option definitions, click ? Configuring advanced server settings Managing security keys 7 Task 1 Click Menu | Configuration | Server...
...all downloads this file might be automatically saved to access this task to import agent-server secure communication keys that server to that location. in the interface. in the interface. Task 1 Click Menu | Configuration | Server Settings, select Security Keys from the Setting Categories list, then click Edit. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 69 In the dialog box, type the name of the security key. For option definitions, click ? Configuring advanced server settings Managing security keys 7 Task 1 Click Menu | Configuration | Server...
Product Guide
Page 70
..., select Security Keys from the selected McAfee ePO server. 3 Import the exported keys to all other servers. 4 Designate the imported key as the master. If you have stopped using the new key pair after the next agent-server communication. 7 Configuring advanced server settings Managing security keys 3 If you can monitor agent updates. 1 Create an agent update task. 2 Export the keys chosen from the Setting Categories list, then click Edit. Agents begin using the old key, delete it. If the server manages 4.6 agents, make sure the 4.6 Agent Key Updater package has been checked into...
..., select Security Keys from the selected McAfee ePO server. 3 Import the exported keys to all other servers. 4 Designate the imported key as the master. If you have stopped using the new key pair after the next agent-server communication. 7 Configuring advanced server settings Managing security keys 3 If you can monitor agent updates. 1 Create an agent update task. 2 Export the keys chosen from the Setting Categories list, then click Edit. Agents begin using the old key, delete it. If the server manages 4.6 agents, make sure the 4.6 Agent Key Updater package has been checked into...
Product Guide
Page 72
... a password to encrypt the keystore ZIP file or click OK to save the files as unencrypted text. 4 From the File Download dialog box, click Save to create a zip file of the page. The Restore Security Keys page appears. 72 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 7 Configuring advanced server settings Managing security keys Tasks • Backing up all security keys on page 72 McAfee recommends periodically backing up all security keys, and always creating a backup before making any security keys are currently managed...
... a password to encrypt the keystore ZIP file or click OK to save the files as unencrypted text. 4 From the File Download dialog box, click Save to create a zip file of the page. The Restore Security Keys page appears. 72 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 7 Configuring advanced server settings Managing security keys Tasks • Backing up all security keys on page 72 McAfee recommends periodically backing up all security keys, and always creating a backup before making any security keys are currently managed...
Product Guide
Page 92
... File Download dialog box appears. 2 Click Save, browse to the location to the agent. 92 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide For use the same distributed repositories as the SiteMgr.xml file. Exporting the repository list SiteList.xml file Use this task to export the repository list (SiteList.xml) file for manual delivery to systems, or for importing into other servers on page 93 Use this task to export the list of supported products. 8 Setting up...
... File Download dialog box appears. 2 Click Save, browse to the location to the agent. 92 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide For use the same distributed repositories as the SiteMgr.xml file. Exporting the repository list SiteList.xml file Use this task to export the repository list (SiteList.xml) file for manual delivery to systems, or for importing into other servers on page 93 Use this task to export the list of supported products. 8 Setting up...
Product Guide
Page 104
... using one group). Choose whether to set up Agent Handler groups. to add and remove additional Agent Handlers to quickly change the priority of the following Agent Criteria options: • Browse to manage multiple handlers throughout your fallback strategy. 104 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide Delete a handler assignment Edit a handler assignment Do this ... Use the drag-and-drop handle to the list (an Agent Handler can view or download the AgentHandlerAssignments.xml file. Click Delete...
... using one group). Choose whether to set up Agent Handler groups. to add and remove additional Agent Handlers to quickly change the priority of the following Agent Criteria options: • Browse to manage multiple handlers throughout your fallback strategy. 104 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide Delete a handler assignment Edit a handler assignment Do this ... Use the drag-and-drop handle to the list (an Agent Handler can view or download the AgentHandlerAssignments.xml file. Click Delete...
Product Guide
Page 189
... package. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 189 Nothing else is removed automatically. updating. Packages cannot be configured and scheduled for systems on another, you must be manually checked in a package that leave the network. • Not using global updating - If not implementing global updating for product updating, an update client task must check in the proper order. If you to deploy product and update packages to ensure your managed systems...
... package. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 189 Nothing else is removed automatically. updating. Packages cannot be configured and scheduled for systems on another, you must be manually checked in a package that leave the network. • Not using global updating - If not implementing global updating for product updating, an update client task must check in the proper order. If you to deploy product and update packages to ensure your managed systems...
Product Guide
Page 201
.... • To specify command-line installation options, type the desired command-line options in the System Tree. You can click + or - McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 201 Each assigned client task per selected category appears in the interface. 1 Click Menu | Policy | Client Task Catalog, select McAfee Agent | Product Deployment as Product Deployment (McAfee Agent). The products listed are installing. in the details pane. 9 Click Actions | New Client Task Assignment. Use one of the edit links to Install, then select the Language of the...
.... • To specify command-line installation options, type the desired command-line options in the System Tree. You can click + or - McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 201 Each assigned client task per selected category appears in the interface. 1 Click Menu | Policy | Client Task Catalog, select McAfee Agent | Product Deployment as Product Deployment (McAfee Agent). The products listed are installing. in the details pane. 9 Click Actions | New Client Task Assignment. Use one of the edit links to Install, then select the Language of the...
Product Guide
Page 206
...; Click Menu | Reporting | Queries, select VSE: DAT Deployment in the Queries list, then click Actions | Run. The ePolicy Orchestrator software provides three repository branches for this query. For additional information, see Checking in to the server. Adding them to the Current branch makes them available to your repository. For additional information, see Configuring the Deployment task for groups of managed systems. 3 Create a scheduled Update client task for...
...; Click Menu | Reporting | Queries, select VSE: DAT Deployment in the Queries list, then click Actions | Run. The ePolicy Orchestrator software provides three repository branches for this query. For additional information, see Checking in to the server. Adding them to the Current branch makes them available to your repository. For additional information, see Configuring the Deployment task for groups of managed systems. 3 Create a scheduled Update client task for...
Product Guide
Page 254
.... Adding elements to a report You can upload new images and modify the images used within a report. • Configuring text report elements on page 255 You can insert static text within a report on page 258 You can now be performed on system status Working with reports Task For option definitions, click ? Any of the following tasks can change the order in the interface. 1 Click Menu | Reporting | Queries & Reports, then select the Report tab. 2 Select a report from the list...
.... Adding elements to a report You can upload new images and modify the images used within a report. • Configuring text report elements on page 255 You can insert static text within a report on page 258 You can now be performed on system status Working with reports Task For option definitions, click ? Any of the following tasks can change the order in the interface. 1 Click Menu | Reporting | Queries & Reports, then select the Report tab. 2 Select a report from the list...
Product Guide
Page 315
... aggregation, See notifications Applied Policies creating queries 170 Apply Tag action 132 ASCI (See agent-to-server communication interval) 150 assigning issues 294 assignment of ticketed issues to users 296 assignment rules agents and handlers 106 Audit Log about 112 purging 113 viewing action history 112 working with 112 authentication configuring for Windows 56 authentication, configuring for Windows 53 authorization configuring for Windows 56 strategies 55 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 315
... aggregation, See notifications Applied Policies creating queries 170 Apply Tag action 132 ASCI (See agent-to-server communication interval) 150 assigning issues 294 assignment of ticketed issues to users 296 assignment rules agents and handlers 106 Audit Log about 112 purging 113 viewing action history 112 working with 112 authentication configuring for Windows 56 authentication, configuring for Windows 53 authorization configuring for Windows 56 strategies 55 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 315
Product Guide
Page 316
... creating queries 170 C catch-all groups 130 certificate authentication configuring ePolicy Orchestrator 58 configuring users 60 disabling 59 enabling 59 introduction to 58 strategies for use 58 troubleshooting 60 uploading server certificates 59 Change Branch action 206 charts (See queries) 242 Check IP Integrity action 129 client tasks about 199, 200 client task catalog 200 creating and scheduling 204 deleting 205 editing settings for 205 installing RSD sensors 282 objects 200 sharing 200 working with 204 command-line options...
... creating queries 170 C catch-all groups 130 certificate authentication configuring ePolicy Orchestrator 58 configuring users 60 disabling 59 enabling 59 introduction to 58 strategies for use 58 troubleshooting 60 uploading server certificates 59 Change Branch action 206 charts (See queries) 242 Check IP Integrity action 129 client tasks about 199, 200 client task catalog 200 creating and scheduling 204 deleting 205 editing settings for 205 installing RSD sensors 282 objects 200 sharing 200 working with 204 command-line options...
Product Guide
Page 321
... checking in manually 207 configuring deployment task 202 deploying updates with tasks 194 moving between branches in repository 208 security for 187 passwords changing on user accounts 44 permission sets applying to Active Directory groups 55 assigning to reports 258 creating 49 deleting 51 duplicating 50 editing 50 example 47 exporting 50 importing 51 interaction with users and groups 47 mapping to Active Directory groups 53 rogue system detection 271 System Tree 123 working...
... checking in manually 207 configuring deployment task 202 deploying updates with tasks 194 moving between branches in repository 208 security for 187 passwords changing on user accounts 44 permission sets applying to Active Directory groups 55 assigning to reports 258 creating 49 deleting 51 duplicating 50 editing 50 example 47 exporting 50 importing 51 interaction with users and groups 47 mapping to Active Directory groups 53 rogue system detection 271 System Tree 123 working...
Product Guide
Page 323
reports about 251 adding elements 254 adding to a group 258 configuring chart elements 256 configuring image elements 254 configuring table elements 255 configuring template and location for 36 configuring text elements 255 creating 253 deleting 261 editing existing 253 exported query results 240 exporting 260 formats 240 headers and footers 256 importing 261 removing elements 257 reordering elements 258 running 259 running with a server task 260 scheduling 260 structure and page size 251 viewing output 258 working with 252 repositories branches...
reports about 251 adding elements 254 adding to a group 258 configuring chart elements 256 configuring image elements 254 configuring table elements 255 configuring template and location for 36 configuring text elements 255 creating 253 deleting 261 editing existing 253 exported query results 240 exporting 260 formats 240 headers and footers 256 importing 261 removing elements 257 reordering elements 258 running 259 running with a server task 260 scheduling 260 structure and page size 251 viewing output 258 working with 252 repositories branches...
Product Guide
Page 326
... how they are closed 296 how they are reopened 297 how they are synchronized 297 server integrations for 297 synchronizing 302 synchronizing on a schedule 302 working with 301 troubleshooting certificate authentication 60 product deployment 200 verifying properties of agent and products 153 U UNC share repositories about 79 creating and configuring 86 editing 90 enabling folder sharing 90 unmanaged repositories 79 326 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide
... how they are closed 296 how they are reopened 297 how they are synchronized 297 server integrations for 297 synchronizing 302 synchronizing on a schedule 302 working with 301 troubleshooting certificate authentication 60 product deployment 200 verifying properties of agent and products 153 U UNC share repositories about 79 creating and configuring 86 editing 90 enabling folder sharing 90 unmanaged repositories 79 326 McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide