Setup guide

McAfee ePO Advanced Suite Installer Product Guide
McAfee ePO
Advanced Suite Installer Page 27
will see a pie chart. If all test systems are running the same DAT, the pie chart will display only one
color. However, this is an important query to watch going forward, so you will know at a glance if all
your clients are current on their virus signatures.
5 Click Close. We will revisit this query again.
Creating a Custom Query
ePolicy Orchestrator also provides a wizard that allows you to create custom queries, which can also be
used in a dashboard. In this section, you will create a more advanced query that displays both the
version and patch level of VirusScan installations, broken down by servers and workstations.
1 Click the Queries & Reports button on the favorites bar.
2 At the bottom of the page, click New.
3 Make sure System Management is highlighted on the left, select Managed Systems under Result
Types, and then click Next.
4 Select Stacked Bar Chart on the left, under Display Results As.
5 For Stack Labels Are, scroll down and select Product Version (VirusScan Enterprise) under
VirusScan Enterprise Properties.
6 For Bar Labels Are, scroll down and select Hotfix/Patch Version (VirusScan Enterprise) under
VirusScan Enterprise Properties, and then click Next.
7 Under Available Columns on the left, click the arrow next to IP Address under Computer Properties to
add it to the column list on the right, and then click Next.
8 On the Filter page, click Run. Your results will appear homogeneous, as all your test machines are
running the same version and patch level of VirusScan. As future product patches are released, it is
helpful to be able to report on any unpatched systems. This report will provide that visibility at a glance,
as well as display any systems where VirusScan is not installed.
9 Click Save.
10 On the Save Query page, provide a name for the query, such as VSE: Version w\Patch Level.
11 Select VirusScan Enterprise from the Existing Group drop-down, then click Save. Your new query
is now listed alphabetically in the VirusScan query group. You can run this query at any time or use it in
a dashboard.
Here’s the output of this sample query, showing several systems running different versions of VirusScan.
The green bars show workstations and servers running VirusScan 8.8 with no patch. The blue areas
indicate workstations and servers with VirusScan 8.7 with Patch 4, while the yellow section shows three
workstations running VirusScan 8.7 with only Patch 3.
Drilling down on the yellow section provides details regarding those specific systems still running VSE 8.7
with Patch 3. Of course, product patches and new product versions can be deployed using ePolicy
Orchestrator and would be updated in under normal circumstances. This sample query is provided to