McAfee DTP-1650-MGRA Installation Guide - Page 49

Installing McAfee DLP WCF service, Web Access Authorized Groups

Get McAfee DTP-1650-MGRA - Network DLP Manager 1650 Appliance PDF manuals and user guides View all McAfee DTP-1650-MGRA manuals
Add to My Manuals
Save this manual to your list of manuals

Page 49 highlights

Installing McAfee DLP Endpoint Installing McAfee DLP WCF service 5 Installing McAfee DLP WCF service The McAfee DLP Windows Communication Foundation (WCF) service is used to communicate between McAfee ePolicy Orchestrator, McAfee Data Loss Prevention Endpoint, and the McAfee DLP Monitor. In McAfee Total Protection for Data Loss Prevention, it is not used to communicate with ePolicy Orchestrator or with the McAfee DLP Monitor. Web access authorized groups When installing the McAfee DLP WCF service, you are asked to specify the Web Access Authorized Groups (WAAG). We recommend setting up a group or groups in Windows Active Directory or Open LDAP with the names of users authorized to log on to the database. When the McAfee DLP Endpoint policy console attempts to connect to WCF, it impersonates the logged on user. After the user name is authenticated, WCF checks to see if the user is a member of the WAAG before connecting to the database. WCF service installation options There are two basic options for installing the Windows Communication Foundation (WCF) service: on the same server as the McAfee ePO (SQL) database (local installation) or on a separate server (remote installation). Where McAfee ePolicy Orchestrator is installed, together with its database or on a separate server, is not relevant to this discussion, only the relative locations of WCF and the database. Option 1: Installing WCF locally When installing WCF on the same server as the McAfee DLP Endpoint database, you can use Windows authentication or SQL authentication. The option is selected on the WCF service installation wizard. The selected authentication applies only to the connection between WCF and the database. The connection between the administration workstation and WCF always uses Windows authentication. If you have selected Windows authentication, and the logged on user is a member of the WAAG, connection to the database proceeds without further checking. The user must be defined in the SQL database. See Adding a user in SQL Server. Figure 5-1 WCF service local to the McAfee ePO database McAfee Data Loss Prevention 9.2.1 Installation Guide 49

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
Installing McAfee DLP WCF service
The McAfee DLP Windows Communication Foundation (WCF) service is used to communicate between
McAfee ePolicy Orchestrator, McAfee Data Loss Prevention Endpoint, and the McAfee DLP Monitor. In
McAfee Total Protection for Data Loss Prevention, it is not used to communicate with ePolicy
Orchestrator or with the McAfee DLP Monitor.
Web access authorized groups
When installing the McAfee DLP WCF service, you are asked to specify the
Web Access Authorized Groups
(WAAG). We recommend setting up a group or groups in Windows Active Directory or Open LDAP with
the names of users authorized to log on to the database.
When the McAfee DLP Endpoint policy console attempts to connect to WCF, it impersonates the logged
on user. After the user name is authenticated, WCF checks to see if the user is a member of the WAAG
before connecting to the database.
WCF service installation options
There are two basic options for installing the Windows Communication Foundation (WCF) service: on
the same server as the McAfee ePO (SQL) database (local installation) or on a separate server (remote
installation). Where McAfee ePolicy Orchestrator is installed, together with its database or on a
separate server, is not relevant to this discussion, only the relative locations of WCF and the database.
Option 1: Installing WCF locally
When installing WCF on the same server as the McAfee DLP Endpoint database, you can use Windows
authentication or SQL authentication. The option is selected on the WCF service installation wizard.
The selected authentication applies only to the connection between WCF and the database. The
connection between the administration workstation and WCF always uses Windows authentication. If
you have selected Windows authentication, and the logged on user is a member of the WAAG,
connection to the database proceeds without further checking.
The user must be defined in the SQL database. See
Adding a user in SQL Server
.
Figure 5-1
WCF service local to the McAfee ePO database
Installing McAfee DLP Endpoint
Installing McAfee DLP WCF service
5
McAfee Data Loss Prevention 9.2.1
Installation Guide
49