McAfee TEECDE-AA-AA - Total Protection For Endpoint Manuale utente

McAfee Total Protection for Endpoint

Lab Evaluation Guide

No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form

or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.

TRADEMARK ATTRIBUTIONS

AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE

EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN,

WEBSHIELD are registered trademarks or trademarks of McAfee, Inc. and/or its affiliates in the US and/or other countries. McAfee Red in

connection with security is distinctive of McAfee brand products. All other registered and unregistered trademarks herein are the sole property

of their respective owners.

LICENSE INFORMATION

License Agreement

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED,

WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH

TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS

THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET,

A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU

DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN

THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.

License Attributions

Refer to the product Release Notes.

McAfee Total Protection for Endpoint Lab Evaluation Guide2

Contents

Welcome.....................................................................................4

System requirements......................................................................7

Server requirements........................................................................7

Database requirements......................................................................8

Operating systems language support.........................................................10

Setting up McAfee Total Protection for Endpoint suite...............................11

Logging on to ePolicy Orchestrator.....................................................13

Set Up the ePolicy Orchestrator Server................................................14

Add Systems to Manage..................................................................16

Setting Policies for Endpoints...........................................................18

Setting Policies for Email Servers.......................................................26

Set Tasks for Endpoints..................................................................32

Deploy the McAfee Agent................................................................35

Using Dashboards and Queries..........................................................39

Summary...................................................................................42

References.................................................................................43

3McAfee Total Protection for Endpoint Lab Evaluation Guide

Welcome

Welcome to McAfee®Total Protection®for Endpoint. This solution incorporates the best and

most comprehensive McAfee security for endpoints, email, web, and data. Compared to

purchasing and maintaining multiple security components from multiple vendors, McAfee Total

Protection for Endpoint saves time, saves money, and provides a more powerful, integrated

defense against the threats that businesses know about, and the threats they can't see coming.

This guide is organized so you can evaluate McAfee Total Protection for Endpoint in a pilot

environment consisting of one ePolicy Orchestrator®(ePO™) server and a number of client

computers. The guide covers the basic steps required to install ePolicy Orchestrator quickly,

configure basic policies and tasks, and deploy these McAfee products for client protection:

• VirusScan®Enterprise 8.7i

• AntiSpyware Enterprise 8.7

• Host Intrusion Prevention 7.0

• SiteAdvisor®Enterprise Plus 3.0

• GroupShield®7.0.1 for Microsoft Exchange

• McAfee Security for Lotus Domino, v7.5 on Windows

This guide provides real examples of steps you take during a live deployment. It does not cover

every possible deployment scenario, nor examine every feature. For complete information on

all aspects of the products included in Total Protection for Endpoint, see their respective product

guides.

Full product documentation is available on the McAfee KnowledgeBase.

Under Self Service, click Product Documentation, choose a product and version, then

choose a document.

Product descriptions

The products in Total Protection for Endpoint are grouped into these categories:

• Management solution

• Endpoint protection

• Email server protection

Management solution

Total Protection for Endpoint provides these products for a management solution.

DescriptionProduct

ePolicy Orchestrator is the industry-leading system security management

solution for the enterprise. It delivers a coordinated, proactive defense

McAfee ePolicy Orchestrator 4.5

against malicious threats and attacks. ePolicy Orchestrator combines

unmatched global policy control with a single agent and a central console

with custom reporting to easily manage your system security

environment.

McAfee Total Protection for Endpoint Lab Evaluation Guide4

DescriptionProduct

McAfee Agent is the client-side framework that supports the McAfee

security management infrastructure. It provides secure communication

McAfee Agent 4.5

between point-products and ePolicy Orchestrator, and local services to

point-products. As a framework, the McAfee Agent enables

point-products to focus on enforcing their policies, while delivering an

expanding set of services that includes logging, communication, and

policy storage.

Endpoint protection

Total Protection for Endpoint provides these products for endpoint protection.

DescriptionProduct

VirusScan Enterprise, a trusted name in security, is a leader in the

advanced, proactive protection for PCs and servers. Businesses rely on

McAfee VirusScan®Enterprise 8.7i

the key features of VirusScan Enterprise during an outbreak, including:

cleaning memory, rootkits, the registry and files, as well as preventing

propagation of malicious code to other systems. VirusScan Enterprise

also contains functionality from anti-virus, intrusion prevention, and

firewalls for protection from known and unknown attacks.

AntiSpyware Enterprise Module, the leading enterprise anti-spyware

software solution, uses true on-access scanning to identify, proactively

McAfee AntiSpyware Enterprise 8.7

block, and safely eliminate potentially unwanted programs (PUPs) for

optimal business availability. Centrally managed with ePolicy

Orchestrator, McAfee AntiSpyware Enterprise Module seamlessly

integrates with VirusScan Enterprise, reducing disruptions due to threats

and PUPs.

Host Intrusion Prevention monitors and blocks intrusions by combining

signature and behavioral protection with a system firewall. Shielding

McAfee Host Intrusion Prevention 7.0

your assets improves the availability, confidentiality, and integrity of

your business processes. A single agent makes it easy to deploy,

configure, and manage, and patching becomes less frequent and less

urgent.

SiteAdvisor Enterprise Plus allows your employees to surf and search

the web safely as threats like spyware, adware, phishing scams, and

McAfee SiteAdvisor®Enterprise Plus 3.0

more are blocked. Integrated into McAfee solutions, SiteAdvisor

Enterprise technology adds web security to your comprehensive

protection, guiding and shielding users from online threats.

Email server protection

Total Protection for Endpoint provides these products for email server protection.

DescriptionProduct

GroupShield protects your email and other documents as they enter

and leave your Microsoft Exchange server. GroupShield proactively

McAfee GroupShield®7.0.1 for Microsoft

Exchange

scans for viruses, automatically manages outbreaks, and prevents

malicious code from disrupting your systems. The GroupShield content

filter blocks or quarantines messages that contain specific words and

phrases that violate content rules.

McAfee Security for Lotus Domino protects your email and other

documents as they enter and leave your Domino server. McAfee

McAfee Security for Lotus Domino, v7.5 on

Windows

Security for Lotus Domino proactively scans for viruses, automatically

manages outbreaks, and prevents malicious code from disrupting your

systems. The McAfee Security for Lotus Domino content filter blocks

or quarantines messages that contain specific words and phrases that

violate content rules.

Welcome

5McAfee Total Protection for Endpoint Lab Evaluation Guide

DescriptionProduct

Anti-Spam blocks spam from your Microsoft Exchange and Lotus Domino

mail servers. This increases employee productivity, while also stopping

McAfee Anti-Spam add-on

phishing scams to protect confidential data from being disclosed by

employees. Anti-Spam integrates with McAfee GroupShield and McAfee

Security for Lotus Domino to reduce resource usage on your busy mail

servers.

When you are ready to deploy products to your environment, like VirusScan Enterprise or Host

Intrusion Prevention, you will use ePolicy Orchestrator and the McAfee Agent to handle the

deployment and updates. McAfee recommends that you use the workflow in the following

sections to get started with the solution.

Welcome

McAfee Total Protection for Endpoint Lab Evaluation Guide6

System requirements

Before setting up McAfee Total Protection for Endpoint software, verify that each component

meets the minimum system requirements that are listed below:

• Server

• Database

Server requirements

Free disk space — 1 GB minimum (first-time installation); 2 GB recommended.

Memory — 1 GB available RAM; 2–4 GB recommended.

Processor — Intel Pentium III-class or higher; 1 GHz or higher.

Monitor — 1024x768, 256-color, VGA monitor.

NIC — Network interface card; 100 MB or higher.

NOTE: If using a server with more than one IP address, ePolicy Orchestrator uses the first

identified IP address.

Dedicated server — If managing more than 250 computers, McAfee recommends using a

dedicated server.

File system — NTFS (NT file system) partition recommended.

IP address — McAfee recommends using static IP addresses for ePO servers.

Server-class operating system — 32bit or 64bit

• Windows Server 2003 Enterprise with Service Pack 2 or later

• Windows Server 2003 Standard with Service Pack 2 or later

• Windows Server 2003 Web with Service Pack 2 or later

• Windows Server 2003 R2 Enterprise with Service Pack 2 or later

• Windows Server 2003 R2 Standard with Service Pack 2 or later

• Windows Server 2008

NOTE: Installation is blocked if you attempt to install on a version of Windows earlier than

Server 2003. In addition, ePolicy Orchestrator stops functioning if, after having been installed

on Windows Server 2003, the server is upgraded to Windows Server 2008.

Browser

• Firefox 3.0

• Microsoft Internet Explorer 7.0 or 8.0

If using Internet Explorer and a proxy, follow these steps to bypass the proxy server.

1From the Tools menu in Internet Explorer, select Internet Options.

7McAfee Total Protection for Endpoint Lab Evaluation Guide

2Select the Connections tab and click LAN Settings.

3Select Use a proxy server for your LAN, then select Bypass proxy server for local

addresses.

4Click OK as needed to close Internet Options.

Domain controllers — The ePolicy Orchestrator server can manage systems in a Workgroup

or Windows Domain. In the installation instructions below, we will use the latter which requires

the server to be a member of your Windows domain. For instructions, see the Microsoft product

documentation.

Security software

• Install and/or update the anti-virus software on the ePolicy Orchestrator server and scan

for viruses.

CAUTION: If running VirusScan Enterprise 8.5i or 8.7i on the system where you are installing

ePolicy Orchestrator, you must ensure that the VSE Access Protection rules are disabled

during the installation process, or the installation fails.

• Install and/or update firewall software on the ePolicy Orchestrator server.

Ports

• McAfee recommends avoiding the use of Port 8443 for HTTPS communication. Although this

is the default port, it is also the primary port used by many web-based activities, is a popular

target for malicious exploitation, and it is likely to be disabled by the system administrator

in response to a security violation or outbreak.

NOTE: Ensure that the ports you choose are not already in use on the ePolicy Orchestrator

server computer.

• Notify the network staff of the ports you intend to use for HTTP and HTTPS communication

via ePolicy Orchestrator.

NOTE: Installing the software on a Primary Domain Controller (PDC) is supported, but not

recommended.

Supported virtual infrastructure software

• VMware ESX 3.5.x

• Microsoft Virtual Server 2005 R2 with Service Pack 1

• Windows Server 2008 Hyper-V

Database requirements

A database must be installed before ePolicy Orchestrator can be installed. Any of the following

databases, if previously installed, meets this requirement.

• SQL Server 2005

• SQL Server 2005 Express

• SQL Server 2008

• SQL Server 2008 Express

NOTE: SQL Server 2000 is not supported.

System requirements

Database requirements

McAfee Total Protection for Endpoint Lab Evaluation Guide8

If none of those databases was previously installed, the ePO installation wizard detects that no

database is present and offers you the opportunity to install SQL Server 2005 Express.

Database installation documented in this Guide

The only database installation scenario described in detail is a first-time installation of SQL

Server 2005 Express. In this scenario, the ePO Setup installs both the ePolicy Orchestrator

software and the database on the same server. If the database is to be installed on a different

server from the ePolicy Orchestrator, manual installation is required on the remote servers.

SQL Server

•Local database server — If using SQL Server on the same system as the ePO server,

McAfee recommends using a fixed memory size in Enterprise Manager that is approximately

two-thirds of the total memory for SQL Server. For example, if the computer has 1GB of

RAM set 660MB as the fixed memory size for SQL Server.

•SQL Server licenses — If using SQL Server, a SQL Server license is required for each

processor on the computer where SQL Server is installed.

CAUTION: If the minimum number of SQL Server licenses is not available after you install

the SQL Server software, you may have issues installing or starting the ePolicy Orchestrator

software.

Other relevant database installations and upgrades

See the documentation provided by the database manufacturer for information about the

following installation scenarios:

•Maintenance settings — McAfee recommends making specific maintenance settings to

ePO databases. For instructions, see

Maintaining ePO databases

in the

ePolicy Orchestrator

Help.

NOTE: For detailed system requirements information about Agent Handlers, Database and

Distributed Repositories, refer to the

ePolicy Orchestrator 4.5 Installation Guide

Other software requirements

The following table provides additional information about the other software requirements.

NoteSoftware

You must acquire and install.MSXML 6.0

1From the Internet Explorer Tools menu, select Windows

Update.

2Click Custom, then select Software.

3Select MSXML6.

4Select Review and install updates, then click Install Updates.

You must acquire and install.Internet Explorer 7 or 8, or

Firefox 3.0

You must acquire and install if using SQL Server 2005 Express..NET Framework 2.0

If not previously installed, the installation wizard installs automatically.Microsoft Visual C++

Redistributable

System requirements

Database requirements

9McAfee Total Protection for Endpoint Lab Evaluation Guide

NoteSoftware

If not previously installed, the installation wizard installs automatically.Microsoft Visual C++

Redistributable - x86 9.0.21022

If not previously installed, the installation wizard installs automatically.MDAC 2.8

If not previously installed, the installation wizard installs automatically.SQL Server 2005 Backward

Compatibility

If no other database has been previously installed, this database can be installed

automatically at user’s selection.

SQL Server 2005 Express

Update the ePolicy Orchestrator server and the database server with the most

current updates and patches.

Microsoft updates

The installation fails if using a version of MSI previous to MSI 3.1.MSI 3.1

Microsoft updates and patches

Update both the ePO server and the database server with the latest Microsoft security updates.

If you are upgrading from MSDE 2000 or SQL 2000, be sure to follow Microsoft's required

upgrade scenarios.

Operating systems language support

This version of the ePolicy Orchestrator runs on any supported operating system irrespective

of the language of the operating system.

Following is a list of languages into which the ePolicy Orchestrator has been translated. When

the software is installed on an operating system using a language that is not on this list, the

ePolicy Orchestrator interface attempts to display in English.

• Japanese• Chinese (Simplified)

• Chinese (Traditional) • Korean

• Russian• English

• French (Standard) • Spanish

• German (Standard)

System requirements

Operating systems language support

McAfee Total Protection for Endpoint Lab Evaluation Guide10

Questo manuale è adatto per i seguenti modelli

Indice

Altri manuali McAfee Software

McAfee

McAfee MFN10EMB3RAA - Family Protection - PC Manuale utente

McAfee

McAfee TSA00M005PAA - Total Protection Service Manuale utente

McAfee

McAfee NAPCKE-AB-AA - VirusScan For NetApp Manuale utente

McAfee

McAfee TSA00M005PAA - Total Protection Service Manuale utente

McAfee

McAfee OFFICE 3.1 Manuale utente

McAfee

McAfee INTERNET SECURITY 2008 Manuale utente

McAfee

McAfee EPOLICY ORCHESTRATOR 4.0 - LOG FILES FOR Manuale utente

McAfee

McAfee TSA00M005PAA - Total Protection Service Manuale utente

McAfee

McAfee VSMCDE-AA-AA - VirusScan Mobile - PC Manuale utente

McAfee

McAfee DR SOLOMON S ANTI-VIRUS 8.5 Manuale utente

McAfee

McAfee NETSHIELD - FOR NETWARE SERVERS Manuale utente

McAfee

McAfee VPF40E001RAA - VirusScan 2005 - PC Manuale utente

McAfee

McAfee MANAGEMENT EDITION 2.5 Manuale utente

McAfee

McAfee HISCDE-AB-IA - Host Intrusion Prevention Manuale utente

McAfee

McAfee UNINSTALLER 6.0 Manuale utente

McAfee

McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES... Manuale utente

McAfee

McAfee AVM85M - VirusScan For Mac Manuale utente

McAfee

McAfee EPOLICY ORCHESTRATOR 4.5 - Manuale utente

McAfee

McAfee GSSCDE-AA-DA - GroupShield Security Suite Manuale utente

McAfee

McAfee EPOLICY ORCHESTRATOR 4.5 RELEA Manuale di istruzioni

McAfee

McAfee MTP08EMB3RUA - Total Protection - PC Manuale utente

McAfee

McAfee MTP08EMB3RUA - Total Protection - PC Manuale utente

McAfee

McAfee ANTI-THEFT FILE PROTECTION Manuale utente

McAfee

McAfee VIRUSSCAN WIRELESS 1.0 - Manuale utente

Manuali Software popolari di altre marche

COMPRO

COMPRO COMPROFM Manuale utente

Muratec

Muratec OFFICEBRIDGE ONLINE Manuale utente

Oracle

Oracle Contact Center Anywhere 8.1 Manuale utente

Adobe

Adobe 65007312 - Photoshop Lightroom Manuale

Avaya

Avaya NULL One-X for RIM Blackberry Manuale utente

HP ProLiant BL420c Manuale utente

PS Audio

PS Audio PowerPlay Manuale del proprietario

Brady

Brady LOCKOUT PRO 3.0 Manuale di servizio

Avaya

Avaya Interaction Center Manuale utente

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuale

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuale utente

Oracle

Oracle Application 9i Manuale utente

Acer

Acer RDM Manuale utente

Canon

Canon Vixia HF21 Manuale utente

Canon

Canon ZR950 Manuale utente

Samsung

Samsung Auto Backup Manuale utente

Polycom

Polycom Vortex EF2201 Istruzioni per l'installazione e il funzionamento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuale utente