What is McAfee repository

Repositories house your security software packages and their updates for distribution to your managed systems. The McAfee ePO repository architecture offers flexibility to ensure that deploying and updating software is as easy and automated as your environment allows. …

What is a super agent distributed repository?

A SuperAgent is a distributed repository which is designed to reduce the load on McAfee ePO. … The SuperAgent caches information received from McAfee ePO, the Master Repository, an HTTP, or an FTP repository, and distributes it to the agents in its broadcast domain.

How do I create a tag in McAfee ePO?

1. Click Menu, Systems, Tag Catalog, New Tag.
2. On the New Tag pane, enter a name.
3. To open the Properties Catalog pane, click + in the Criteria row, or click Add below the Criteria row.
4. Click anywhere in the property row that you want to include.

What is McAfee agent handler?

Agent Handlers route communication between agents and your McAfee ePO server. Each McAfee ePO server contains a master Agent Handler. … Helps manage an increased number of products and systems managed by a single, logical McAfee ePO server in situations where the CPU on the database server is not overloaded.

What does ePO stand for McAfee?

With McAfee e-Policy Orchestrator (ePO) software, IT administrators can unify security management across endpoints, networks, data, and compliance solutions from McAfee and third-party solutions.

What is lazy cache in McAfee?

The Lazy Caching feature allows SuperAgents to retrieve data from McAfee ePO servers only when requested by a local agent node. … When the SuperAgent receives a wake-up call from the McAfee ePO server, it wakes up the agents using its repository connection.

How does McAfee ePO work?

With McAfee ePO software, IT administrators can unify security management across endpoints, networks, data, and compliance solutions from McAfee and third-party solutions. McAfee ePO software provides flexible, automated management capabilities so you identify, manage, and respond to security issues and threats.

How do I create a McAfee repository?

1. Select Menu → Software → Distributed Repositories, then click Actions → New Repository. …
2. On the Description page, type a unique name and select HTTP, UNC, or FTP, then click Next. …
3. On the Server page, configure one of the following server types. …
4. Click Next.
5. On the Credentials page: …
6. Enter Replication credentials.

What ports does McAfee ePO use?

Default PortProtocolTraffic direction443TCPInbound/outbound connection to/from the ePO server445SMBOutbound connection from the ePO server636TCPOutbound connection from the ePO server1433TCPOutbound connection from the ePO server

What are agent handlers used to?

Agent Handlers are used to reduce the event management load on the McAfee ePO server. Through a slow or irregular connection — Agent Handlers require a relatively high speed, low latency connection to the database to deliver events sent by the agents. To save bandwidth —Agent Handlers do not save bandwidth.

Article first time published on

How do I install McAfee agent handler in DMZ?

1. Build a server running Windows Server 2012 R2 and install all of the latest security patches.
2. Have server placed in your company’s DMZ which should still be behind a firewall.
3. Have a published DNS record created for access from internet-based agent.

What is a remote agent handler?

Agent Handlers distribute network traffic generated by agent-server communication by directing managed systems or groups of systems to report to a specific Agent Handler. … The handler provides updated sitelists, policies, and policy assignment rules, just as the McAfee ePO server does.

How do I remove an EPO tag?

1. Edit tag — Click the tag that you want to edit, then on the Tag Details pane, you can edit these settings: …
2. Delete tag — Click Actions → Delete, then from the Delete dialog-box, click OK to delete the tag.

Which repository provides all updates to the EPO master repository?

Source site. The source site provides all updates for your Master Repository.

How do I remove a tag from Mcafee EPO?

Remove a specific tag — Select the tag group, then select the tag. Tip: To limit the list to specific tags, type the tag name in the text box under Tags. Remove all tags — Select Clear All.

What does McAfee DLP Endpoint do?

McAfee DLP Endpoint provides comprehensive protection for all possible leaking channels, including removable storage devices, the cloud, email, instant messaging, web, printing, clipboard, screen capture, file- sharing applications, and more.

What is ePO Anti Virus?

Overview: McAfee ePolicy Orchestrator (McAfee ePO) is the most advanced, extensible, and scalable centralized security management software in the industry. … Drillable, drag-and-drop dashboards provide security intelligence across endpoints, data, mobile, and networks for immediate insight and faster response times.

What is hips McAfee?

Re: What is Mcafee HIPS? Jump to solution. HIPS is Host Intrusion Prevention. AntiVirus software provides protection against malware whereas, HIPS provides protection against OS and application vulnerabilities. McAfee HIPS includes behavioral and signature based protection.

Is McAfee ePO free?

Sign up for a 60-day free trial of McAfee ePO Cloud. After signing up for a trial account, you have full access to the products available in McAfee ePO Cloud for 60 days. This trial gives you an opportunity to evaluate McAfee ePO and its products in your environment.

What is McAfee Endpoint Security ENS?

McAfee Endpoint Security is an integrated solution that replaces several individual legacy endpoint products, including McAfee VirusScan Enterprise, McAfee Host IPS Firewall, and McAfee SiteAdvisor web filtering.

What are the McAfee ePO components?

• Manages and deploys products, upgrades, and patches.
• Connects to the McAfee ePO update server to download the latest security content.
• Enforces policies on your endpoints.
• Collects events, product properties, and system properties from the managed endpoints and sends them back to McAfee ePO.

What is ePO port?

McAfee ePO uses ports to communicate with web browsers, SQL Server, managed systems, the network, and other portions of the software. … TCP port opened by agents to receive agent wakeup requests from the McAfee ePO server. TCP port opened to replicate repository content to a SuperAgent repository.

Is port 80 A TCP?

Port 80 is one of the most commonly used port numbers in the Transmission Control Protocol (TCP) suite. Any Web/HTTP client, such as a Web browser, uses port 80 to send and receive requested Web pages from a HTTP server.

What is port 135 commonly used for?

Port 135 is used for RPC client-server communication; ports 139 and 445 are used for authentication and file sharing. UDP ports 137 and 138 are used for local NetBIOS browser, naming, and lookup functions.

How do I change my McAfee repository?

1. Select Menu → Software → Distributed Repositories, then click a repository. The Distributed Repository Builder wizard opens, displaying the details of the distributed repository.
2. Change configuration, authentication, and package selection options as needed.
3. Click Save.

How do I install McAfee agent handler?

1. Open the folder where you extracted the contents of the McAfee ePO software installation package.
2. Copy the Agent Handler folder to the intended Agent Handler server system.
3. Right-click Setup.exe and select Run as Administrator to start the Intel Agent Handler InstallShield wizard.

Which line in log config XML can be changed to enable debug logging for Orion?

You can configure the file output debug level in the log configuration file. This file is located in c:\Program Files\McAfee\ePolicy Orchestrator\Server\conf\orion\log-config. xml . You can change the warn default log level, identified in the <root> tag, to debug in the log-config.

How do I set up an agent handler?

1. Open the folder where you extracted the contents of the McAfee ePO software installation package.
2. Copy the Agent Handler folder to the intended Agent Handler server system.
3. Right-click Setup.exe and select Run as Administrator to start the McAfee Agent Handler InstallShield wizard.

Which ports must be open on the internal facing firewall in a customer environment by default for the SQL database to connect to an agent handler in a DMZ?

By default, the typical ports used by SQL Server and associated database engine services are: TCP 1433, 4022, 135, 1434, UDP 1434.