Setup guide

McAfee ePO Advanced Suite Installer Product Guide
McAfee ePO
Advanced Suite Installer Page 11
5 Click OK.
6 As needed, repeat these steps to add any servers to your Laptops or Servers group or its subgroups.
There are several methods of organizing and populating the System Tree:
• Manually structure your System Tree by creating your own groups and adding individual systems.
• Synchronize with Active Directory or NT domain as a source for systems. In the case of using
Active Directory, synchronization mirrors AD and automatically provides System Tree structure.
• Create your own groups and sort based on IP ranges or subnets. This is called criteria-based
sorting.
• Import a text file of groups and systems.
Quick Tip: If you wish to test system & group creation through Active Directory, detailed steps are
provided in the McAfee Quick Tips video
Active Directory Synchronization in ePO.
Set policies for endpoints
Policies are used to set the configuration for the various McAfee Endpoint products, such as VirusScan
Enterprise, Host IPS, and many other products. Many pre-built best practice policies have been included
as part the installer. They differ somewhat from the default policies in that some are designed for
optimization and others to ensure endpoint clients function together in the most efficient manner. Note
that these policies are not yet in effect. Within this guide we will discuss and apply several of these
policies.
In a production environment, one would normally create and assign such policies in the System Tree
before software is ever deployed. As such, the same approach will be used in your test deployment and
evaluation.
The McAfee Agent policies
The McAfee Agent is the client-side component providing secure communication with ePolicy
Orchestrator. It downloads and enforces policies, and handles client tasks such as deployment and
updating for McAfee and McAfee-compatible, third-party products found at our
Security Innovation
Alliance.
Assigning a McAfee Agent policy globally
The following policy allows for remote viewing of the McAfee Agent log via browser and increases the
Agent to Server Connection Interval (ASCI) from the default of 60 minutes to 120 minutes.
1 Click the System Tree button on the favorites bar.
2 Highlight My Organization.
3 Click the Assigned Policies tab.
• From the Product drop-down menu, select McAfee Agent.
• On the line that lists General, click Edit Assignment.
• For Inherit from, select Break inheritance and assign the policy and settings below.
• From the Assigned Policy drop-down menu, select EASI – General.
• Click Save. The policy is now assigned to that group and all its subgroups.