McAfee EPOLICY ORCHESTRATOR 4.5 - Manuel utilisateur

McAfee ePolicy Orchestrator 4.5

Product Guide

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form

or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

TRADEMARK ATTRIBUTIONS

AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE

EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN,

WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in

connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property

of their respective owners.

LICENSE INFORMATION

License Agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED,

WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH

TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS

THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET,

A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU

DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN

THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.

License Attributions

Refer to the product Release Notes.

McAfee ePolicy Orchestrator 4.5 Product Guide2

Contents

Introducing ePolicy Orchestrator 4.5...................................................14

Components and what they do..............................................................14

Usingthisguide...........................................................................15

Audience.........................................................................15

Finding documentation for McAfee enterprise products. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

Getting Started with ePolicy Orchestrator 4.5........................................17

LoggingonandoffePOservers..............................................................17

Logging on to ePO servers...........................................................17

Logging off ePO servers.............................................................17

Viewing the server version number ..........................................................18

How to navigate the ePO interface...........................................................18

The Menu........................................................................18

The navigation bar.................................................................19

Setting up ePolicy Orchestrator..............................................................19

Configure your ePO server...........................................................20

Add systems to the System Tree......................................................20

Distribute agents to your systems.....................................................21

Create repositories.................................................................21

Configure your policies and client tasks................................................22

Deploy yourproducts andsoftware....................................................22

Configure advanced features.........................................................22

Configuring ePolicy Orchestrator.......................................................23

ePO user accounts........................................................................24

Global administrators...............................................................24

Working with user accounts..........................................................24

How permission sets work..................................................................25

Working with permission sets........................................................26

Contacts.................................................................................28

Working with contacts..............................................................28

Serversettingsandthebehaviorstheycontrol..................................................29

Working with server settings.........................................................30

3McAfee ePolicy Orchestrator 4.5 Product Guide

Managing ePolicy Orchestrator users with Active Directory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Configuring Windows authentication and authorization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Registering servers for use with ePolicy Orchestrator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

What are registered servers..........................................................39

Registering servers.................................................................39

Security keys and how they work............................................................41

Backingupand restoring keys........................................................42

Master repository key pair...........................................................44

Agent-server secure communication (ASSC) keys. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

MyAvert Security Threats ..................................................................50

WorkingwithMyAvertSecurityThreats.................................................50

Agent Handlers and what they do............................................................52

How Agent Handlers work...........................................................52

Handler groups and priority..........................................................52

WorkingwithAgentHandlers.........................................................53

IPv6....................................................................................58

Exporting tables and charts to other formats...................................................59

Distributing Agents to Manage Systems...............................................60

Aboutthe McAfee Agent....................................................................60

Agent-server communication ........................................................61

Wake-up calls and wake-up tasks.....................................................62

SuperAgents and broadcast wake-up calls..............................................63

System requirements and supported operating systems and processors. . . . . . . . . . . . . . . . . . . . . . 63

Installing the McAfee Agent.................................................................65

Methodsof agent deploymentand installation...........................................65

Agentinstallation folder— Windows...................................................78

Agent installation folder — UNIX-based systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

The agent installation package.......................................................79

Agent installation command-line options...............................................80

Assigning values to custom properties.................................................81

Upgrading and Restoring Agents.............................................................81

Upgrading agents using product deployment task. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

Upgrading agents manually or with login scripts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Restoring a previous version of the agent (Windows). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Restoring a previous version of the agent (UNIX). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

Configuring Agent Policies..................................................................83

About agent policy settings..........................................................84

McAfee ePolicy Orchestrator 4.5 Product Guide4

Contents

Proxy settingsfor theagent..........................................................86

Retrieving system properties.........................................................87

Scheduling a client task for a group...................................................87

Creating a new scheduled client task..................................................88

Configuring selected systems for updating..............................................89

Working with the agent from the ePO server...................................................89

Viewingagentandproductproperties..................................................89

Viewing system information..........................................................90

Accessing settingstoretrieveproperties................................................90

Windows system and product properties reported by the agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Sending manual wake-up calls to systems..............................................92

Sending manual wake-up calls to a group..............................................92

Makingthe system tray iconvisible....................................................93

Locating inactive agents ............................................................93

Runningagenttasksfromthemanagedsystem.................................................93

Running a manual update...........................................................94

Enforcing policies..................................................................94

Updating policies...................................................................95

Sending properties to the ePO server..................................................95

Sending events to the ePO server immediately..........................................95

Usingtheiconoptiontoupdate.......................................................95

Forcing the agent to call in to the server...............................................96

Viewing version numbers and settings.................................................96

Agent command-line options.........................................................97

Using the system tray icon..................................................................97

What the system tray icon does......................................................97

Makingthe system tray iconvisible....................................................98

Enabling user access to updating functionality. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Removing the McAfee Agent................................................................98

RunningFrmInst.exefromthecommandline............................................99

Removing agents when deleting systems from the System Tree. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

Removing agents when deleting groups from the System Tree. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99

Removing agents from systems in query results. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Uninstalling from non-Windows operating systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100

Agent Activity Logs.......................................................................101

Viewing the agent activity log.......................................................101

5McAfee ePolicy Orchestrator 4.5 Product Guide

Contents

Organizing the System Tree............................................................103

The System Tree.........................................................................104

Considerations when planning your System Tree...............................................105

Administrator access...............................................................105

Environmental borders and their impact on system organization. . . . . . . . . . . . . . . . . . . . . . . . . . . 106

Subnets and IP address ranges......................................................106

Tags and systems with similar characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

Operating systems and software.....................................................107

Tags and how they work..................................................................107

Active Directory and NT domain synchronization...............................................108

Active Directory synchronization.....................................................108

NT domain synchronization.........................................................110

Criteria-based sorting.....................................................................110

How settings affect sorting.........................................................111

IP address sorting criteria..........................................................111

Tag-basedsortingcriteria...........................................................111

Group order and sorting............................................................112

Catch-all groups..................................................................112

How a system is first placed in the System Tree...............................................112

Working with tags........................................................................113

CreatingtagswiththeTagBuilder....................................................113

Excludingsystemsfromautomatictagging.............................................114

Applyingtags toselected systems....................................................115

Applying criteria-based tags automatically to all matching systems. . . . . . . . . . . . . . . . . . . . . . . . . 115

Creating andpopulating groups.............................................................116

Creating groups manually..........................................................118

Addingsystemsmanuallytoanexistinggroup..........................................118

Importing systems from a text file...................................................119

Sortingsystems into criteria-based groups.............................................121

Importing Active Directory containers.................................................123

Importing NT domains to an existinggroup............................................125

Synchronizing the System Tree on a schedule..........................................127

Updating the synchronized group with an NT domain manually. . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

Moving systems manually within the System Tree..............................................128

Transferring systems between ePO servers...................................................129

Creating Repositories...................................................................130

Repository types and what they do..........................................................130

McAfee ePolicy Orchestrator 4.5 Product Guide6

Contents

Types of distributed repositories.....................................................132

Repository branches and their purposes...............................................133

Repositorylistfileanditsuses.......................................................134

Howrepositories work together.............................................................134

Ensuringaccesstothesourcesite...........................................................135

Configuring proxy settings..........................................................135

Configuring proxy settings for the McAfee Agent. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135

Configuring proxy settings for MyAvert Security Threats. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136

Working with source and fallback sites.......................................................137

Switching source and fallback sites...................................................137

Creating source sites..............................................................137

Editing source and fallback sites.....................................................138

Deleting source sites or disabling fallback sites. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139

Using SuperAgents as distributed repositories.................................................139

Creating SuperAgent repositories....................................................139

Selecting which packages are replicated to SuperAgent repositories. . . . . . . . . . . . . . . . . . . . . . . . 140

Deleting SuperAgent distributed repositories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Creating and configuring FTP, HTTP, and UNC repositories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Creating a folder location on an FTP, HTTP server or UNC share. . . . . . . . . . . . . . . . . . . . . . . . . . . 141

Adding the distributed repository to ePolicy Orchestrator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

Avoidingreplication ofselectedpackages..............................................143

Disabling replication of selected packages.............................................144

Enabling folder sharing for UNC and HTTP repositories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

Editing distributed repositories ......................................................144

Deleting distributed repositories.....................................................145

Working with the repository list files.........................................................145

Exporting the repository list SiteList.xml file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

Exporting the repository list SiteMgr.xml file for backup or use by other servers. . . . . . . . . . . . . . . 146

Importing distributed repositories from the SiteMgr.xml file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

Importing source sites from the SiteMgr.xml file. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

Changing credentials on multiple distributed repositories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147

Managing your Network with Policies and Client Tasks............................148

Product extensions and what they do........................................................148

Policy management.......................................................................149

Policy application.........................................................................150

Creating Policy Managementqueries.........................................................151

Client tasks and what they do..............................................................152

7McAfee ePolicy Orchestrator 4.5 Product Guide

Contents

Bringing products under management.......................................................153

Viewing policy information.................................................................153

Viewing groups and systems where a policy is assigned. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

Viewing the settings of a policy......................................................154

Viewing policy ownership...........................................................154

Viewing assignments where policy enforcement is disabled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

Viewingpoliciesassignedtoagroup..................................................155

Viewing policies assigned to a specific system. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155

Viewing a group’s policy inheritance..................................................155

Viewingand resettingbroken inheritance..............................................155

WorkingwiththePolicyCatalog.............................................................156

Creating a policy from the Policy Catalog page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156

Duplicating a policy on the Policy Catalog page. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

Editing a policy’s settings from the Policy Catalog. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

Renamingapolicy fromthe Policy Catalog.............................................158

Deleting a policy from the Policy Catalog..............................................158

Working with policies.....................................................................158

Changing the owners of a policy.....................................................159

Moving policies between ePO servers.................................................159

Assigning a policy to a group of the System Tree. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160

Assigningapolicytoamanagedsystem...............................................160

Assigning a policy to multiple managed systems within a group. . . . . . . . . . . . . . . . . . . . . . . . . . . . 161

Enforcing policies for a product on a group............................................161

Enforcing policies for a product on a system...........................................162

Copying and pasting assignments....................................................162

Working with client tasks..................................................................164

Creating and scheduling client tasks..................................................164

Editing client tasks................................................................164

Deleting client tasks...............................................................165

Frequently asked questions................................................................165

Sharing policies among ePO servers.........................................................166

Setting up policy sharing for multiple ePO servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

Howpolicyassignmentruleswork...........................................................167

Policy assignment rule priority.......................................................168

Working with policy assignment rules.................................................168

Deploying Software and Updates......................................................171

Deployment packages for products and updates...............................................171

McAfee ePolicy Orchestrator 4.5 Product Guide8

Contents

Product and update deployment............................................................173

Deployment tasks.................................................................173

Update tasks.....................................................................174

Global updating...................................................................174

Pull tasks........................................................................175

Replication tasks..................................................................176

Repository selection...............................................................177

Server task log...................................................................177

Checking in packages manually.............................................................178

Using the Product Deployment task to deploy products to managed systems. . . . . . . . . . . . . . . . . . . . . . . . 179

Configuring the Deployment task for groups of managed systems. . . . . . . . . . . . . . . . . . . . . . . . . . 179

Configuring the Deployment task to install products on a managed system. . . . . . . . . . . . . . . . . . 180

Deploying update packages automatically with global updating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181

Deploying update packages with pull and replication tasks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183

Using pull tasks to update the master repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183

Replicating packages from the master repository to distributed repositories. . . . . . . . . . . . . . . . . . 185

Configuring agent policies to use a distributed repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187

Using local distributed repositories that are not managed. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

Checking in engine, DAT and ExtraDAT update packages manually. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189

Updating managed systems regularly with a scheduled update task. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190

Confirming that clients are using the latest DAT files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190

Evaluating new DATs and engines before distribution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191

Manually moving DAT and engine packages between branches. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192

Deleting DAT or engine packages from the master repository. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192

Reporting On System Status...........................................................193

Queries................................................................................193

Public and personal queries.........................................................194

Query permissions................................................................194

Query Builder...........................................................................195

Working with queries.....................................................................196

Creating customqueries............................................................196

Running an existing query..........................................................197

Running a query on a schedule......................................................197

Making a personal query group......................................................199

Making existing personal queries public...............................................200

Duplicating queries................................................................200

Sharing a query between ePO servers................................................200

9McAfee ePolicy Orchestrator 4.5 Product Guide

Contents

Exporting query results to other formats..............................................201

Multi-server rollup querying................................................................202

Preparing for rollup querying........................................................202

Creating a query to define compliance................................................204

Generating compliance events.......................................................204

The Audit Log...........................................................................205

Working with the Audit Log.........................................................205

The Server Task log......................................................................207

Working with the Server Task Log....................................................210

Allowed Cron syntax when scheduling a server task. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 211

The Threat Event Log.....................................................................212

Working with theThreat EventLog...................................................213

Data exports from any table or chart........................................................214

Monitoring with Dashboards...........................................................216

Default dashboards and their monitors.......................................................216

Queries as dashboard monitors......................................................216

Default dashboards and their monitors................................................216

Setting updashboardaccess andbehavior....................................................218

Giving users permissions to dashboards...............................................219

Configuring the refresh frequency of dashboards. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219

WorkingwithDashboards..................................................................219

Creating dashboards...............................................................220

Makingadashboardactive..........................................................220

Selecting all active dashboards......................................................220

Makingadashboardpublic..........................................................221

Detecting Rogue Systems..............................................................222

Whatareroguesystems...................................................................223

Howthe Rogue System Sensor works........................................................223

Passive listening to layer-2 traffic....................................................223

Intelligent filteringof networktraffic..................................................224

Data gathering and communications to the server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224

Systems that host sensors..........................................................225

Howdetectedsystemsarematchedandmerged...............................................225

Rogue System Detection states.............................................................226

Overall system status..............................................................226

Rogue System Sensor status........................................................227

Subnet status....................................................................228

McAfee ePolicy Orchestrator 4.5 Product Guide10

Contents

Autres manuels pour EPOLICY ORCHESTRATOR 4.5 -

Table des matières

Autres manuels McAfee Logiciel

McAfee

McAfee VIRUSSCAN PLUS 2008 Manuel utilisateur

McAfee

McAfee VIRUSSCAN 8.7I Manuel utilisateur

McAfee

McAfee EPOLICY ORCHESTRATOR 4.0 - LOG FILES FOR Manuel utilisateur

McAfee

McAfee TSA00M005PAA - Total Protection Service Manuel utilisateur

McAfee

McAfee NAPCKE-AB-AA - VirusScan For NetApp Manuel utilisateur

McAfee

McAfee EPOLICY ORCHESTRATOR 4.5 - Manuel utilisateur

McAfee

McAfee EPOLICY ORCHESTRATOR 4.0.2 - Manuel utilisateur

McAfee

McAfee DFFCDE-AA-DA - Endpoint Encryption For Files Manuel utilisateur

McAfee

McAfee HISCDE-AB-IA - Host Intrusion Prevention Manuel utilisateur

McAfee

McAfee SMEFCE-AI-DA - Email Security Service... Mode d’emploi

McAfee

McAfee MIS09EMB3RAA - Internet Security 2009 Manuel utilisateur

McAfee

McAfee GUARD DOG 2 Manuel utilisateur

McAfee

McAfee Agent 4.0 Mode d’emploi

McAfee

McAfee FOUNDSTONE ON-DEMAND Manuel utilisateur

McAfee

McAfee VIRUSSCAN ENTERPRISE 8.7I PATCH 3 - S... Mode d’emploi

McAfee

McAfee MANAGEMENT EDITION 2.5 Manuel de service

McAfee

McAfee VIRUSSCAN 5.1 Manuel utilisateur

McAfee

McAfee TSA00M005PAA - Total Protection Service Manuel utilisateur

McAfee

McAfee VIRUSSCAN WIRELESS 1.0 - Manuel utilisateur

McAfee

McAfee INTERNET SECURITY 5.0 Manuel utilisateur

McAfee

McAfee SMB EDITIONS Manuel utilisateur

McAfee

McAfee VCLCDE-AA-DA - VirusScan Command Line Scanner... Manuel utilisateur

McAfee

McAfee MFN10EMB3RAA - Family Protection - PC Manuel utilisateur

McAfee

McAfee AVDCDE-AA-AA - Active Virus Defense Suite Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur