McAfee EPOCDE-AA-BA Product Guide - Page 153

Viewing agent and product properties, Responding to policy events

Page 153 highlights

Working with the agent from the McAfee ePO server Viewing agent and product properties 13 How communication interruptions are handled When a SuperAgent receives a request for content that might be outdated, the SuperAgent attempts to contact the McAfee ePO server and other sites listed in Sitelist.xml to see if new content is available. If the connection attempts time out, the SuperAgent distributes content from its own repository instead. This is done to ensure the requester receives content even if that content might be outdated. Viewing agent and product properties A common troubleshooting task is to verify that the policy changes you made match the properties retrieved from a system. The properties you see depend on whether you configured the agent to send full or minimal properties on the McAfee Agent policy pages. Task For option definitions, click ? in the interface. 1 Click Menu | Systems | System Tree. 2 On the Systems tab, click the row corresponding to the system you want to examine. Information about the system's properties, installed products, and agent appear. New in ePolicy Orchestrator 4.6 is a ribbon at the top of the System Information page containing Summary, Properties, and Threat Events windows. Responding to policy events You can set up an automatic response in ePolicy Orchestrator filtered to see only policy events. Task For option definitions, click ? in the interface. 1 Click Menu | Automation | Automatic Responses to open the Automatic Responses page. 2 Click Actions | New Response. 3 Enter a Name for the response, and an optional Description. 4 Select ePO Notification Events for the Event group, and Client or Server for the Event type. 5 Click Enabled to enable the response and click Next. 6 From the Available Properties, select Event Description. McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 153

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328

How communication interruptions are handled
When a SuperAgent receives a request for content that might be outdated, the SuperAgent attempts
to contact the McAfee ePO server and other sites listed in
Sitelist.xml
to see if new content is
available. If the connection attempts time out, the SuperAgent distributes content from its own
repository instead. This is done to ensure the requester receives content even if that content might be
outdated.
Viewing agent and product properties
A common troubleshooting task is to verify that the policy changes you made match the properties
retrieved from a system.
The properties you see depend on whether you configured the agent to
send full or minimal properties on the McAfee Agent policy pages.
Task
For option definitions, click
?
in the interface.
1
Click
Menu
|
Systems
|
System Tree
.
2
On the
Systems
tab, click the row corresponding to the system you want to examine.
Information about the system's properties, installed products, and agent appear. New in ePolicy
Orchestrator 4.6 is a ribbon at the top of the System Information page containing
Summary
,
Properties
,
and
Threat Events
windows.
Responding to policy events
You can set up an automatic response in ePolicy Orchestrator filtered to see only policy events.
Task
For option definitions, click
?
in the interface.
1
Click
Menu
|
Automation
|
Automatic Responses
to open the Automatic Responses page.
2
Click
Actions
|
New Response
.
3
Enter a
Name
for the response, and an optional
Description
.
4
Select
ePO Notification Events
for the
Event group
, and
Client
or
Server
for the
Event type
.
5
Click
Enabled
to enable the response and click
Next
.
6
From the
Available Properties
, select
Event Description
.
Working with the agent from the McAfee ePO server
Viewing agent and product properties
13
McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide
153