McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual page 122

®
ePolicy Orchestrator 3.6 Walkthrough Guide
S T E P
4
In this section, you will:
1 Configure Rogue System Detection sensor
2 Deploy the Rogue System Detection sensor
3 Configure an automatic response.
4 Rogue detection and remediation.
Configure Rogue System Detection sensor policy
Before deploying the Rogue System Detection sensor, you should first configure the
sensor policy.
These specific configurations to the sensor policy are only for the purpose of the
evaluation. These are not recommended configurations for a production environment
deployment of the sensor.
Note
Once the sensor is deployed to a system in your environment, it requires one
agent-to-server communication and one policy enforcement interval before it is
functioning in the environment. The agent-to-server communication installs the sensor
on the system in a disabled state. Then the policy enforcement retrieves policy,
including security certificates. These certificates are needed by the sensor to
communicate to the server directly.
The following configuration changes to the sensor policy speed up this process for this
purpose of this guide.
1 In the console tree, select
2 In the details pane, select the
Edit
3 Click at the right end of the
New Policy
4 Select from the
appears.
New policy name
5 Provide a
Policy Settings
dialog box appears.
General
6 On the tab, deselect
following changes:
Minimum reporting interval for each detected host
a Set
Minimum sensor-to-server communication interval for primary sensors
b Set
Apply All Close
7 Click , then click
Apply
8 Click at the end of the
new policy to the site selected in the console tree.
policy.
Directory
.
Policy Rogue System Sensor 1.0.0
tab, then select
Configuration
row.
Policy Name
drop-down list. The
for the policy (for example,
Sensor1
Inherit Communication Intervals
, then under
to
. The new policy is created.
Configuration Assign Policies
row on the
119
Advanced Feature Evaluations
Rogue System Detection
.
Create new policy
dialog box
OK
), then click . The
make the
120
seconds.
5
to seconds.
page to assign the
9