McAfee SAV85E - Active VirusScan - PC Supplement Manual

Operational user guidance and preparative procedures

Advertisement

Quick Links

Supplement for Common Criteria
Operational User Guidance and Preparative
Procedures
®
McAfee
VirusScan
®
McAfee
ePolicy Orchestrator
®
Enterprise 8.8
®
4.5 Software

Advertisement

Table of Contents
loading

Summary of Contents for McAfee SAV85E - Active VirusScan - PC

  • Page 1 Supplement for Common Criteria Operational User Guidance and Preparative Procedures ® ® McAfee VirusScan Enterprise 8.8 ® ® McAfee ePolicy Orchestrator 4.5 Software...
  • Page 2: License Information

    PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.
  • Page 3: Table Of Contents

    Contents Introduction About the Common Criteria ....................5 Assumptions ........................6 Authorized Administrators .................... 6 Physical Access ......................6 Acronyms ......................... 6 Installation Guidelines and Preparative Procedures Overview .......................... 7 Downloading the TOE ......................7 Evaluated Configuration...................... 8 Functionality Not Included in the Evaluation ..............9 Verify Software .........................
  • Page 4 Operational User Guidance and Preparative Procedures Supplement for Common Criteria...
  • Page 5: Introduction

    These assurance requirements call for documentation of installation procedures that provide assurance that the TOE is installed and configured in the evaluated configuration. This document serves as a supplement to the standard McAfee documentation set including the following: McAfee VirusScan Enterprise 8.8 Product Guide ...
  • Page 6: Assumptions

    Introduction Assumptions The McAfee VirusScan Enterprise 8.8 and ePolicy Orchestrator 4.5 (hereafter called “Target of Evaluation” or the “TOE”) has achieved Common Criteria Evaluation Assurance Level 2 and augmented by ALC_FLR.2 – Flaw Reporting Procedures. Please visit: http://www.commoncriteriaportal.org for more information on the Common Criteria.
  • Page 7: Installation Guidelines And Preparative Procedures

    The My Products page appears showing links for the products to which the customer is entitled. For example, if the grant number includes entitlement to McAfee VirusScan Enterprise, there will be an entry for the McAfee Active VirusScan. Select McAfee Active VirusScan.
  • Page 8: Evaluated Configuration

    Evaluated Configuration The evaluated configuration includes one or more instances of McAfee Agent and McAfee VirusScan Enterprise and an instance of McAfee ePolicy Orchestrator. Note that for the evaluated configuration, all user accounts defined in McAfee ePO must specify Windows authenticaltion (rather than McAfee ePO authentication).
  • Page 9: Functionality Not Included In The Evaluation

    Installation Guidelines and Preparative Procedures Verify Software The evaluated configuration includes one or more instances of McAfee Agent and VirusScan Enterprise and an instance of McAfee ePO. The following configuration should apply to the evaluated configuration: All user accounts defined in McAfee ePO must specify Windows authentication.
  • Page 10: Updating System Software

    Extensions / VirusScan Enterprise when logged into ePolicy Orchestrator Updating System Software If the TOE is not running the evaluated version of software, the administrator should contact McAfee to obtain the appropriate license/grant for the evaluated software version. Install Database Capacity Monitor Extension The purpose of the feature is to enable the use of automatic responses to alert the administrator of the exhaustion of storage space being used by the SQL database.
  • Page 11: Step 1: Adjust Or Review Database Space Requirements

    Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension Select Install Extension. Follow the prompts to install the downloaded extension. Once installed, verify that the version matches below: Creating and generating responses for Database is a three-part sequence. These steps require adjusting or reviewing database limits, setting up a server task and finally creating an Automatic Response.
  • Page 12: Step 3: Setting Up The Automatic Response

    Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension Provide name and Enable the task. Select the “Check Database Size” action. Provide schedule settings. Review and save the server task. This server task creates entries in the EPOServerEvents table using the event id of ‘16081’ and contains information pertaining to the audit log entry and server information.
  • Page 13 Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension Add the Event ID as a filter and specify ‘16081’ as the value: On the Aggregation tab of the Automatic Response builder screen, it should be noted that throttling should be used in order to not overload an overload system. From the Actions screen the user can specify the appropriate response;...
  • Page 14 Installation Guidelines and Preparative Procedures Install Database Capacity Monitor Extension Review settings and save the automatic response settings. Operational User Guidance and Preparative Procedures Supplement for Common Criteria...
  • Page 15: Guidance For Administrators

    The Common Criteria evaluated configuration is designed to be as flexible as possible in a deployment scenario. As such, the ongoing guidance for administrators is largely covered in the McAfee VirusScan Enterprise 8.8 software Product Guide. Administrators should read and configure the software according to the guidelines in available documentation and according to their site-specific security policies.

This manual is also suitable for:

Virusscan enterprise 8.8Epolicy orchestrator 4.5

Table of Contents