Setup guide

McAfee ePO Advanced Suite Installer Product Guide
McAfee ePO
Advanced Suite Installer Page 23
Before deploying the McAfee Agent, you should verify both communication between the server and
systems, and access to the default Admin$ share directory on the client. If your test systems are not
part of a domain, you can simply copy Framepkg.exe to your client systems and execute it locally when
we reach that step. Framepkg.exe is located on the ePolicy Orchestrator server in one of the following
directories:
C:\Program Files\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409
or
C:\Program Files(x86)\McAfee\ePolicy Orchestrator\DB\Software\Current\EPOAGENT3000\Install\0409
1 Check that you can ping client systems by name. This demonstrates that the server can resolve client
names to an IP address.
2 Assuming Active Directory Domain, check for remote access to the default Admin$ share on the client
systems:
• From the ePolicy Orchestrator server click Start | Run, then type
\\computer-name\admin$, where
computer-name is the NetBIOS name of one of the client systems. If the systems are properly
connected over the network, your credentials have sufficient rights, and the Admin$ shared
folder is present, a Windows Explorer dialog box opens.
3 If an active firewall is running on any client systems, you may need to create an exception for
Framepkg.exe. This is the McAfee Agent that ePolicy Orchestrator pushes to the systems you will
manage. Alternatively, you can disable the client firewall.
Deploying the McAfee Agent
As previously mentioned, a Windows domain is not a requirement to use ePolicy Orchestrator, but there
are certain advantages when used in the context of a domain. One of those is the installation of the
management agent known as the McAfee Agent. ePolicy Orchestrator pushes this installer to Admin$
share on your test systems and installs with Domain Admin credentials you specify. In fact this is the
only installation that uses a push method. Once the Agent is installed, clients will pull the various
endpoint protection components for installation.
It is assumed you have a limited number of test systems (under 50), so we will push the Agent to all the
machines in the System Tree.
1 Click the System Tree button on the favorites bar.
2 Highlight the My Organization group.
3 Click the Systems tab.
4 Change the Preset drop-down to This Group and All Subgroups to view all the systems.
5 Check the box next to the column heading System Name. This selects all the systems.
6 Click Actions | Agent | Deploy Agents.
7 For Credentials for agent installation: type credentials that have rights to install software on client
systems, such as a Domain Administrator account (domain\administrator), and click OK. If desired, you
can select the option Remember my credentials for future deployments.
8 The Server Task Log appears showing the status of the Agent push.
It will take a few minutes for the McAfee Agent to install and for client systems to retrieve and execute
the installation packages for the endpoint products. When first installed, the Agent determines a random
time up to 10 minutes before its initial communication to the ePolicy Orchestrator server to retrieve
policies and tasks.
Note: You can drag and drop commonly used items from the Actions button onto the taskbar at the
bottom of the ePolicy Orchestrator interface, as shown in the following figure.