McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual page 124

®
ePolicy Orchestrator 3.6 Walkthrough Guide
S T E P
6
Next
6 Click , then select the checkbox next to the desired system to which you want
Mark for Deployment
to deploy a sensor, click
Review and Approve
page appears.
Finish Action Progress
7 Click . The
progress of each sensor deployment.
8 Remember that you must wait until after one agent-to-server communication and
one policy enforcement interval before the sensor calls into the server and is
functioning. This can be expedited by sending agent wakeup calls:
a In the console tree, right-click the system on which you installed the sensor, then
Agent Wakeup Call
select
Agent randomization
b Set
c Wait two minutes, then repeat.
Action Status Completed Successfully
9 Once the is
server and is functioning.
Machines
10 Select the tab and select
Now that the sensor is deployed and installed you are ready to configure a response for
the feature to take on a rogue when one is detected.
Configure an automatic response
You can configure automatic responses for ePolicy Orchestrator to execute on rogue
systems that are detected. There is a considerable amount of flexibility within this
feature regarding the level of granularity available when defining the actions to take, and
the conditions you can add to them. For complete information, see the ePolicy
Orchestrator 3.6 Product Guide.
There are many situations where you may not want an automatic response to be taken.
You can also set conditions around types of rogues where no actions are taken, or
where the detected systems are simply marked for action.
For the purposes of this guide, you will configure a response that deploys an agent onto
the rogue system once it has been discovered.
Rogue System Detection
1 Select
details pane.
2 Select the checkbox next to the default
Checked responses
the drop-down list, then click
, then click
Events
page of the tab displays, indicating the
.
0 OK
to , then click .
, the sensor has called back to the
Summary
to view a summary of detected systems.
in the console tree, then select the
Query ePO Agent
Apply
.
121
Advanced Feature Evaluations
Rogue System Detection
Next Sensor Deployment:
.The
Responses
tab in the
Disable
response, select from
9