McAfee HARDWARE 1.4 User Manual page 8

Automatic Updates with ePO or Protection Pilot
For large network deployments ePolicy Orchestrator (ePO) or ProtectionPilot enable
distribution of applications and virus signatures to multiple nodes on the network. This
centralized application is simple to configure and provides an automated solution to updating
software.
The instruction for obtaining the latest virus signature (DAT) files and copying them to the
Master Repository can be found in the knowledgebase using the following link:
http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=NAI31632&sliceId=S
AL_Public&dialogID=1077249
Once the .DAT files have been downloaded to ePO the updates can then be deployed to the
end nodes, with the instructions provided in the following KnowledgeBase Article:
http://knowledge.mcafee.com/SupportSite/search.do?cmd=displayKC&docType=kc&externalId=NAI31705&sliceId=S
AL_Public&dialogID=1465160
Manual Updates
There are three types of updates for Virus definition files that can be found in the download
section of the ServicePortal:
http://www.mcafee.com/apps/downloads/security_updates/dat.asp
SuperDat Files
The SuperDat file automates the process of loading the latest virus definitions and scan
engine, and is the quickest way to update your system from threats. The engine is the
software that is used to analyze application behavior and search for abnormal activity.
After execution, the SuperDat stops the services, updates the virus definitions, and upgrades
the scan engine to the latest version if needed. After completion, it then restarts the services.
Manual extraction of a DAT file from a SuperDat file can be achieved by creating a new
directory and running the Super DAT file using the /e switch. e.g. SuperDat.exe /e
Daily DAT File
This signature file only contains the latest virus information (with no engine) and is updated
on a daily basis.
Extra DAT File
If a virus outbreak is detected of a medium risk or higher (definitions of risk levels can be
found on the Avert website), then an extra DAT will be generated to rapidly protect customers
from the threat. This file will also just contain the DAT and no engine files.
http://www.mcafee.com/us/threat_center/outbreaks/virus_library/risk_assessment.html
McAfee Inc. © 2007 Hardware Support v1.4 User Guide
Page 5