Table of Contents
Advertisement
McAfee ePolicy Orchestrator Devices
Figure 8-7
g.
h.
i.
j.
k.
Add and Configure ePolicy Orchestrator Server in MARS
Before MARS can begin processing SNMP traps from ePolicy Orchestrator, you must define the ePolicy
Orchestrator server as software running on a host. When ePolicy Orchestrator is defined as a reporting
device, MARS can process any inspection rules that you have defined using ePolicy Orchestrator event
types.
After you add the ePolicy Orchestrator server to MARS, the appliance can discover the agents that are
managed by the ePolicy Ochestrator server as events are generated by those agents. You do not need to
manually define the agents associated with this server.
To add an ePolicy Orchestrator server to MARS, follow these steps:
Step 1
Select Admin > Security and Monitor Devices > Add.
From the Device Type list, select Add SW Security apps on a new host.
Step 2
User Guide for Cisco Security MARS Local Controller
8-12
SNMP Trap Settings
In the SNMP server list, select the SNMP server that represents the MARS Appliance.
Verify that all the variables are selected as shown in
Click Save to add the SNMP trap to the list of notifications for the selected rule.
Click Finish to save the changes to the selected rule.
Repeat Steps
a.
through
j.
for each rule.
Chapter 8
Configuring Antivirus Devices
Figure 8-7 on page
8-12.
78-17020-01
Advertisement
Table of Contents
Troubleshooting
