User Guide
Page 1
Supplement for Common Criteria Operational User Guidance and Preparative Procedures McAfee® VirusScan® Enterprise 8.8 McAfee® ePolicy Orchestrator® 4.5 Software
Supplement for Common Criteria Operational User Guidance and Preparative Procedures McAfee® VirusScan® Enterprise 8.8 McAfee® ePolicy Orchestrator® 4.5 Software
User Guide
Page 2
... TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). COPYRIGHT Copyright © 2011 McAfee, Inc. No part...
... TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). COPYRIGHT Copyright © 2011 McAfee, Inc. No part...
User Guide
Page 3
... Physical Access ...6 Acronyms ...6 2 Installation Guidelines and Preparative Procedures 7 Overview ...7 Downloading the TOE ...7 Evaluated Configuration...8 Functionality Not Included in the Evaluation 9 Verify Software ...9 Updating System Software 10 Install Database Capacity Monitor Extension 10 Step 1: Adjust or Review Database space requirements 11 Step 2: Create a Server Task to generate the Event 11 Step 3: Setting up the automatic response 12 3 Guidance for Administrators 15 Software Version Inspection 15 Required Password Length 15 Operational User Guidance...
... Physical Access ...6 Acronyms ...6 2 Installation Guidelines and Preparative Procedures 7 Overview ...7 Downloading the TOE ...7 Evaluated Configuration...8 Functionality Not Included in the Evaluation 9 Verify Software ...9 Updating System Software 10 Install Database Capacity Monitor Extension 10 Step 1: Adjust or Review Database space requirements 11 Step 2: Create a Server Task to generate the Event 11 Step 3: Setting up the automatic response 12 3 Guidance for Administrators 15 Software Version Inspection 15 Required Password Length 15 Operational User Guidance...
User Guide
Page 4
4 Operational User Guidance and Preparative Procedures Supplement for Common Criteria
4 Operational User Guidance and Preparative Procedures Supplement for Common Criteria
User Guide
Page 5
... to provide the evidence required by the following : McAfee VirusScan Enterprise 8.8 Product Guide McAfee VirusScan Enterprise 8.8 Installation Guide McAfee ePolicy Orchestrator 4.5 Installation Guide McAfee ePolicy Orchestrator 4.5 Product Guide These documents should be read prior to configuring the product in accordance with this supplement describe how to the standard McAfee documentation set policies for evaluating security features of a product. Since administrators configure the TOE and set including the following assurance requirements of...
... to provide the evidence required by the following : McAfee VirusScan Enterprise 8.8 Product Guide McAfee VirusScan Enterprise 8.8 Installation Guide McAfee ePolicy Orchestrator 4.5 Installation Guide McAfee ePolicy Orchestrator 4.5 Product Guide These documents should be read prior to configuring the product in accordance with this supplement describe how to the standard McAfee documentation set policies for evaluating security features of a product. Since administrators configure the TOE and set including the following assurance requirements of...
User Guide
Page 6
... gains physical access to be allowed physical access to the internal network, and follow all administrator guidance. Human users (considered to the product. The evaluated configuration of Evaluation TSF TOE Security Function 6 Operational User Guidance and Preparative Procedures Supplement for more information on the Common Criteria. Please visit: http://www.commoncriteriaportal.org for Common Criteria Introduction Assumptions The McAfee VirusScan Enterprise 8.8 and...
... gains physical access to be allowed physical access to the internal network, and follow all administrator guidance. Human users (considered to the product. The evaluated configuration of Evaluation TSF TOE Security Function 6 Operational User Guidance and Preparative Procedures Supplement for more information on the Common Criteria. Please visit: http://www.commoncriteriaportal.org for Common Criteria Introduction Assumptions The McAfee VirusScan Enterprise 8.8 and...
User Guide
Page 7
... McAfee VirusScan Enterprise 8.8 and ePolicy Orchestrator 4.5. For example, if the grant number includes entitlement to installation, the administrator should follow these steps to download the VirusScan TOE component: 1 Log in to the documents referenced in the Purpose section of all documentation for Common Criteria 7 Operational User Guidance and Preparative Procedures Supplement for VirusScan Enterprise 8.8 and ePolicy Orchestrator 4.5. Contents Overview Downloading the TOE Evaluated Configuration Verify Software Install Database...
... McAfee VirusScan Enterprise 8.8 and ePolicy Orchestrator 4.5. For example, if the grant number includes entitlement to installation, the administrator should follow these steps to download the VirusScan TOE component: 1 Log in to the documents referenced in the Purpose section of all documentation for Common Criteria 7 Operational User Guidance and Preparative Procedures Supplement for VirusScan Enterprise 8.8 and ePolicy Orchestrator 4.5. Contents Overview Downloading the TOE Evaluated Configuration Verify Software Install Database...
User Guide
Page 8
... available VirusScan Enterprise documentation. 9 Download each item. The list of McAfee ePolicy Orchestrator. Evaluated Configuration The evaluated configuration includes one or more instances of McAfee Agent and McAfee VirusScan Enterprise and an instance of related products appears. 3 Select ePolicy Orchestrator v4.5.0. Note that for Common Criteria The license agreement page appears. 4 Click I Agree. The administrator should follow these steps to download the Database Capacity Monitor TOE component: 1 Log in to the download/upgrade site (https://secure...
... available VirusScan Enterprise documentation. 9 Download each item. The list of McAfee ePolicy Orchestrator. Evaluated Configuration The evaluated configuration includes one or more instances of McAfee Agent and McAfee VirusScan Enterprise and an instance of related products appears. 3 Select ePolicy Orchestrator v4.5.0. Note that for Common Criteria The license agreement page appears. 4 Click I Agree. The administrator should follow these steps to download the Database Capacity Monitor TOE component: 1 Log in to the download/upgrade site (https://secure...
User Guide
Page 9
... Central Administrator configures the list of authorized processes. 5 The U.S. Government Protection Profile Anti-Virus Applications for Workstations in Basic Robustness Environments requires the TOE to restrict specific management functionality to remote port 25 (SMTP). At least one ePO user must specify Windows authentication. 2 McAfee Agent should follow one or more instances of McAfee Agent and VirusScan Enterprise and an instance of McAfee ePO. c View VSE settings. d View and change VirusScan Enterprise settings. The following configuration should apply...
... Central Administrator configures the list of authorized processes. 5 The U.S. Government Protection Profile Anti-Virus Applications for Workstations in Basic Robustness Environments requires the TOE to restrict specific management functionality to remote port 25 (SMTP). At least one ePO user must specify Windows authentication. 2 McAfee Agent should follow one or more instances of McAfee Agent and VirusScan Enterprise and an instance of McAfee ePO. c View VSE settings. d View and change VirusScan Enterprise settings. The following configuration should apply...
User Guide
Page 10
..., a new project has been created that allows the user to alert the administrator of the exhaustion of storage space being released by the SQL database. This project is not running the evaluated version of an extension and can view VirusScan Enterprise versioning information via Menu / Software / Extensions / VirusScan Enterprise when logged into ePolicy Orchestrator Updating System Software If the TOE is being used by way of software, the administrator should contact McAfee to...
..., a new project has been created that allows the user to alert the administrator of the exhaustion of storage space being released by the SQL database. This project is not running the evaluated version of an extension and can view VirusScan Enterprise versioning information via Menu / Software / Extensions / VirusScan Enterprise when logged into ePolicy Orchestrator Updating System Software If the TOE is being used by way of software, the administrator should contact McAfee to...
User Guide
Page 11
.... These steps require adjusting or reviewing database limits, setting up a server task and finally creating an Automatic Response. Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension 3 Select Install Extension. 4 Follow the prompts to install the downloaded extension. 5 Once installed, verify that use the limits specified a user must create a server task to run the "Check Database Size" action and set a schedule at which the limits will be queried. 1 New Server Task: Operational User Guidance...
.... These steps require adjusting or reviewing database limits, setting up a server task and finally creating an Automatic Response. Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension 3 Select Install Extension. 4 Follow the prompts to install the downloaded extension. 5 Once installed, verify that use the limits specified a user must create a server task to run the "Check Database Size" action and set a schedule at which the limits will be queried. 1 New Server Task: Operational User Guidance...
User Guide
Page 12
... this will be via an automatic response. Step 3: Setting up the automatic response 1 Select the ePO Notification group, and specify "server" from the event type. 12 Operational User Guidance and Preparative Procedures Supplement for Common Criteria c Provide schedule settings. d Review and save the server task. This server task creates entries in the EPOServerEvents table using the event id of the event id in the configuration screen.
... this will be via an automatic response. Step 3: Setting up the automatic response 1 Select the ePO Notification group, and specify "server" from the event type. 12 Operational User Guidance and Preparative Procedures Supplement for Common Criteria c Provide schedule settings. d Review and save the server task. This server task creates entries in the EPOServerEvents table using the event id of the event id in the configuration screen.
User Guide
Page 13
Operational User Guidance and Preparative Procedures Supplement for Common Criteria 13 in order to the global administrator. Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension 2 Add the Event ID as a filter and specify '16081' as the value: On the Aggregation tab of the Automatic Response builder screen, it should be noted that throttling should be used in this case a server issue is being created and assigned to not overload an overload system. From the Actions screen the user can specify the appropriate response;
Operational User Guidance and Preparative Procedures Supplement for Common Criteria 13 in order to the global administrator. Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension 2 Add the Event ID as a filter and specify '16081' as the value: On the Aggregation tab of the Automatic Response builder screen, it should be noted that throttling should be used in this case a server issue is being created and assigned to not overload an overload system. From the Actions screen the user can specify the appropriate response;
User Guide
Page 14
Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension 3 Review settings and save the automatic response settings. 14 Operational User Guidance and Preparative Procedures Supplement for Common Criteria
Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension 3 Review settings and save the automatic response settings. 14 Operational User Guidance and Preparative Procedures Supplement for Common Criteria
User Guide
Page 15
... as phone numbers, license plates, or social security numbers). Do not use a name (including that the administrator should choose strong passwords by adhering to be as flexible as possible in a manner that complies with the Common Criteria evaluation. Contents Software Version Inspection Required Password Length Software Version Inspection The administrator should read and configure the software according to the guidelines in the McAfee VirusScan Enterprise 8.8 software Product Guide. Note that...
... as phone numbers, license plates, or social security numbers). Do not use a name (including that the administrator should choose strong passwords by adhering to be as flexible as possible in a manner that complies with the Common Criteria evaluation. Contents Software Version Inspection Required Password Length Software Version Inspection The administrator should read and configure the software according to the guidelines in the McAfee VirusScan Enterprise 8.8 software Product Guide. Note that...