Installation Guide. McAfee Endpoint Security for Servers 5.0.0

Transcription

1 Installation Guide McAfee Endpoint Security for Servers 5.0.0

2 COPYRIGHT Copyright 2018 McAfee, LLC TRADEMARK ATTRIBUTIONS McAfee and the McAfee logo, McAfee Active Protection, epolicy Orchestrator, McAfee epo, McAfee EMM, Foundstone, McAfee LiveSafe, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, True Key, TrustedSource, VirusScan are trademarks or registered trademarks of McAfee, LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. 2 McAfee Endpoint Security for Servers Installation Guide

3 Contents 1 Planning your installation 5 Installation overview System and hardware requirements Supported McAfee management platform and software Supported VMware management platform and software Installing Endpoint Security for Servers 7 Download software extensions and packages Install the software extensions on the McAfee epo server Registering a VMware vsphere account Register a VMware vcenter account from the Registered Cloud Accounts page Register a VMware vsphere account from the Accounts pane Create an on-demand scan client task Index 13 McAfee Endpoint Security for Servers Installation Guide 3

4 Contents 4 McAfee Endpoint Security for Servers Installation Guide

5 1 Planning 1 your installation Contents Installation overview System and hardware requirements Installation overview The installation and configuration of McAfee Endpoint Security for Servers involves the installation of extensions on McAfee epolicy Orchestrator (McAfee epo ), registering a VMware cloud account, and configuring the Smart Scheduler settings for resource-intensive tasks. The overall installation and configuration process consists of the following tasks. System and hardware requirements Your virtual systems require specific hardware and software to run Endpoint Security for Servers. Make sure that each of your servers or workstations is running a supported version of Microsoft Windows and conforms to the requirements. Review the requirements and recommendations before installing the software to make sure that your installation is successful. For a complete list of current system (Windows) requirements, see McAfee Knowledge Base article: KB For a complete list of current system (Linux) requirements, see McAfee Knowledge Base article: KB McAfee Endpoint Security for Servers Installation Guide 5

6 1 Planning your installation System and hardware requirements Supported McAfee management platform and software Your systems must be running a supported version of McAfee management platform and software. Software Version McAfee epo or Common UI Core 1.3 or later McAfee Cloud Workload Security or later McAfee Agent or later McAfee Endpoint Security Threat Prevention or later Smart Scheduler Supported VMware management platform and software Your system must be running a supported version of VMware software. Appliance and software Version VMware vcenter 5.5 U2, 6.0, or 6.5 VMware ESXi 5.5 U2, 6.0, or McAfee Endpoint Security for Servers Installation Guide

7 2 Installing 2 Endpoint Security for Servers Contents Download software extensions and packages Install the software extensions on the McAfee epo server Registering a VMware vsphere account Create an on-demand scan client task Download software extensions and packages Download the software extensions and product packages to the McAfee epo server from the McAfee downloads site. Task From the McAfee downloads site ( download these software extensions and packages. Package name Common UI Core.zip Cloud_Workload_Secuirty_Hybrid_5.0.0.zip MA550WIN.zip MA550LNX.zip EPOAGENTMETA.zip Description The Common UI Core extension is required to install Cloud Workload Security. Install Cloud Workload Security extension to discover the VM information and import it to the System Tree. McAfee Agent client package (Windows). McAfee Agent client package (Linux). McAfee Agent extension. McAfee_Agent_Smart_Scheduler_ zip Smart Scheduler extension. Install the software extensions on the McAfee epo server You must install the product extensions on the McAfee epo server before you can use the Smart Scheduler feature on your virtual machines. Before you begin The extension files are in an accessible location on the network. Task 1 Log on to McAfee epo as an administrator. 2 Select Menu Software Extensions Install Extension. McAfee Endpoint Security for Servers Installation Guide 7

8 2 Installing Endpoint Security for Servers Registering a VMware vsphere account 3 Browse to and select each extension file in this order, then click OK. Extension Common UI Core extension Cloud Workload Security extension McAfee Agent extension Smart Scheduler extension Package name Common UI Core.zip Cloud_Workload_Security_Hybrid_5.0.0.zip EPOAGENTMETA.zip McAfee_Agent_Smart_Scheduler_ zip 4 Review the extension details and click OK. Registering a VMware vsphere account You must register a VMware vsphere account with McAfee epo so that McAfee epo communicates with VMware vcenter, which manages the ESXi servers. Register a VMware vsphere account with McAfee epo from one of these locations. Registered Cloud Accounts page Accounts pane Register a VMware vcenter account from the Registered Cloud Accounts page To use Endpoint Security for Servers to manage the virtual machines in your data center, first add your VMware vcenter to the McAfee epo server. Before you begin The VMware vcenter server that manages your ESXi servers is configured to host the guest VMs. The Cloud Workload Security extension is installed on the McAfee epo server. Task 1 Log on to McAfee epo as an administrator. 2 Select Menu Configuration Registered Cloud Accounts, then click Add Cloud Account to open the Add Cloud Account dialog box. 3 From the Choose Cloud Provider drop-down list, select VMware vsphere, then click OK. 4 On the vcenter Account Details page, configure these options. Account Name A name for the VMware vcenter account in McAfee epo. Account names can include characters a z, A Z, 0 9, and [_.-], without space. Server Address (Required) IP address or the host name of the available VMware vcenter. vcenter Username (Required) User name of the available VMware vcenter account. vcenter Password (Required) Password of the available VMware vcenter account. Sync Interval (In Minutes) Specify the interval for running the next vcenter discovery (default value is 5 minutes). Port The port number required to establish the connection with the available VMware vcenter. Tag A way to identify the VMs. Tag names can include characters a z, A Z, 0 9, and [_.-], with space. 8 McAfee Endpoint Security for Servers Installation Guide

9 Installing Endpoint Security for Servers Registering a VMware vsphere account 2 5 Click Test Connection to validate VMware vcenter account details and verify the connection to VMware vcenter, then click Next to open the Validate Certificate page. 6 Click Accept to validate the certificate, then click Finish. 7 When prompted to confirm, click OK to register the vcenter account. This action registers the VMware vcenter and imports all discovered virtual machines, which are unmanaged, into the System Tree. The instances are imported with the same organization as the VMware vcenter. The virtual machines that are already added and managed by McAfee epo are retained with the existing policy settings, but the virtualization properties for these systems are added. 8 To verify that the VMs were imported, select Menu Systems System Tree. After the discovery, you can find your vcenter account under the group vsphere. The clusters and hosts from vcenter are logically grouped under each data center group in the System Tree. Register a VMware vsphere account from the Accounts pane Register a VMware vsphere account with McAfee epo so that McAfee epo communicates with VMware vcenter, which manages the ESXi servers. Before you begin The VMware vcenter server that manages the ESXi servers is configured to host the guest VMs. The Cloud Workload Security extension is installed on McAfee epo. Task 1 Log on to McAfee epo as an administrator. 2 Select Menu Systems Cloud Workload Security, to open the Cloud Workload Security page. 3 From the Accounts pane, click Add Account, to open the Registered Cloud Account pane. 4 From the Select Account Type drop-down list, select VMware vsphere. McAfee Endpoint Security for Servers Installation Guide 9

10 2 Installing Endpoint Security for Servers Registering a VMware vsphere account 5 On the vcenter Account Details page, type these details. Option Account Name Server Address vcenter Username vcenter Password Assessment Policy McAfee epo Tags (seperated by commas) Port Sync Interval (In Minutes) (Optional) Windows Domain Logon Credentials Definition A name for the vcenter account in McAfee epo. Account names can include characters a z, A Z, 0 9, and [_. ], without space. Specify the URL of VMware vsphere endpoint. Type the vcenter user name to log on to vsphere. Type the vcenter password to log on to vsphere. Click Assessment Policy to select the policy to be applied to your vcenter account, or click to go to Policy Catalog page to create or select a policy. List of McAfee epo tags that are applied on VMs discovered for this vcenter account. Tag name can include characters a z, A Z, 0 9, and [_. ], with space. For details about Tag usage, see McAfee epo product documentation. Specify the port name. Specify the interval for McAfee epo to vcenter synchronization (the default value is 5 minutes. The maximum value is 60 minutes). If you specify the sync interval as 5 minutes, the next sync is scheduled 5 minutes after the completion of the current sync. Enter the credentials to deploy the McAfee Agent to the registered VMs. Make sure that the McAfee epo server and the VMs in the vsphere cloud can communicate with each other. 6 Click Test Connection to validate VMware vcenter account details and verify the connection to VMware vcenter, then click Next to open the vcenter Summary page. The summary page includes vcenter, vcns, and NSX summary. 7 Click Submit to register the cloud account. This action registers the VMware vcenter account and imports all discovered virtual machines, which are unmanaged, into the System Tree. The instances are imported with the similar structure and hierarchy present in VMware vcenter. The virtual machines that are already added and managed by McAfee epo are retained with the existing policy settings, but the virtualization properties for these machines are added. 8 To verify that the VMs were imported, select Menu Systems System Tree. After the discovery, you can find your vcenter account under the group vsphere. The clusters and hosts from vcenter are logically grouped under each data center group in the System Tree. 10 McAfee Endpoint Security for Servers Installation Guide

11 Installing Endpoint Security for Servers Create an on-demand scan client task 2 Create an on-demand scan client task Create an on-demand scan client task, so that you can add it to the Smart Scheduler task list. Before you begin The McAfee Agent and Endpoint Security Threat Prevention extensions are installed on the McAfee epo server. The McAfee Agent and Endpoint Security Threat Prevention are installed on the target virtual systems. To configure smart scheduling for Policy Based On-Demand Scan (On-Demand Scan Full Scan or On-Demand Scan Quick Scan), you do not need to create a task. You can directly configure the Smart Scheduler settings and assign the default policy-based on-demand scan task to your VMs. Task 1 Log on to McAfee epo as an administrator. 2 Select Menu Policy Client Task Catalog. 3 Select Custom On-demand Scan in the Client Task Types menu, then click New Task. 4 Select Custom On-demand Scan from the list, then click OK to open the Client Task Builder wizard. 5 Type a name for the task you are creating, and add any descriptive information in the Description field. 6 Configure the Custom On-demand Scan options, as needed. 7 Review the task settings, then click Save. The task is added to the list of client tasks for the selected client task type. You can now configure the Smart Scheduler settings for the task you created. McAfee Endpoint Security for Servers Installation Guide 11

12 2 Installing Endpoint Security for Servers Create an on-demand scan client task 12 McAfee Endpoint Security for Servers Installation Guide

13 Index A account registering 8 R registration VMware vcenter account 8 C connector, choosing 8 E extensions installing 7 H hypervisors 8 I T tags defining 8 V virtual machines boot status 8 virtual properties, displaying 8 VMware vcenter account configuration Endpoint Security for Servers installation 8 installing extension 7 M McAfee epo installation 7 McAfee Endpoint Security for Servers Installation Guide 13

14 0-00