McAfee ePolicy Orchestrator

What is McAfee Threat Prevention? McAfee Endpoint Security Threat Prevention prevents threats from accessing systems, scans files automatically when they are accessed, and runs targeted scans for malware on client systems. Similar to VSE - which includes Access Protection, On Access Scan, On Demand Scan and extra Exploit Prevension Key features of Threat Prevention The key features of Threat Prevention protect against threats entering your environment, detect malware in your environment, and correct issues by cleaning or repairing infected files. Protect Protect your systems from intrusions before they gain access to your environment using these Threat Prevention features. Access Protection — Protect against unwanted changes to client systems by restricting access to specified files, shares, registry keys, registry values, and preventing or restricting processes and services from executing threat behavior. Exploit Prevention — Threat Prevention uses signatures in content upda...

What is AMSI? The Windows Antimalware Scan Interface (AMSI) is a versatile interface standard that allows your applications and services to integrate with any antimalware product that's present on a machine. AMSI provides enhanced malware protection for your end-users and their data, applications, and workloads.

Creation of SuperAgent Distributed Repository in McAfee ePO 5.10 Decide which drive should be acting as Distributed Repository 1. Create Tag with the drive name(SuperAgent C Drive) 2. Create a policy Policy Catalog -> McAfee Agent -> Repository -> New Policy (Select all checkboxes) 3. Create Policy Assignment Rules New Assignment Rule -> Rule Type(System) Add Policy -> McAfee Agent -> Repository -> Select the Policy Select the Tag Review the summary and confirm 4. Go to System Tree and apply SuperAgent tag. 5. That's it Reference article McAfee