McAfee MER for EPO 3.1 Walkthrough Guide. About this guide This guide provides information on how to use McAfee MER for EPO 3.1.

Transcription

1 McAfee MER for EPO 3.1 Walkthrough Guide About this guide This guide provides information on how to use McAfee MER for EPO 3.1.

2 2 1. Scope: The MER for epo tool runs MER (Minimum Escalations Requirements) through epo (epolicy Orchestrator). This product targets corporate users, where the administrator administers and manages a number of computers through epo. The purpose of this product is to enable the epo administrator to run MER on client computers to collect results and logs due to the intricacy associated with McAfee products installed on the client computers. Users can download MER for epo (epo-mer) from the Tools section on the ServicePortal at A login to the ServicePortal is required. Alternatively, it can be downloaded through Software Manager within epo. This guide will cover using both methods. 2. Supported Operating Systems: NOTE: The epo administrator will be unable to push the MER package to operating systems which are not supported by MER for epo 3.1. The supported operating systems for the epo server include: Windows 2012 R2 Server Windows 2012 Server Windows 2008 R2 Server Windows 2008 Server The supported operating systems for the clients include: Windows 2012 R2 Server Windows 2012 Server Windows 2008 R2 Server Windows 2008 Server Windows 10 Windows 8.1 Windows 8 Windows 7 Windows Vista 3. Supported McAfee Products: The current list of supported McAfee products can be found at 4. Installing MER for epo from ServicePortal 4.1 Download and extraction Download the latest MER for epo 3.1 Deployment and Update packages from the ServicePortal. Extract the Deployment package to a location. It will contain deployment and extension zip packages

3 3 4.2 Check in the MER for epo Deployment package 1. To check in the MER for epo package, log on to epo as an administrator and click Menu -> Software -> Master Repository 2. Click Check In Package. 3. Select Product or Update (.ZIP). 4. Browse for the package MER-FOR-EPO DEPLOYMENTPKG.ZIP and then click Next.

4 4 5. Click Save. 4.3 Check in the MER for epo Update package 1. To check in the MER for epo package, log on to epo as an administrator and click Menu -> Software -> Master Repository 2. Click Check In Package.

5 5 3. Select Product or Update (.ZIP). 4. Browse for the package MER_FOR_EPO_Update.ZIP and then click Next. 5. Click Save. 4.4 Check in the MER for epo Extension 1. Log on to epo as an administrator and click Menu -> Software -> Extensions. 2. Select Install Extension

6 6 4. Browse for the package MER-FOR-EPO POLICYMANAGEMENT.ZIP. 5. Click OK to install the extension. 5. Installing MER for epo through Software Manager 1. To go to Software Manager, log on epo as an administrator and click Menu -> Software -> Software Manager

7 7 2. Click Utilities and Connectors 3. Select the MER for epo (epo-mer) product from the list to view the details 4. To check in the deployment, update, and extension packages simultaneously, click Check in All. 5. Select I accept the terms in the license agreement.

8 8 6. Click Ok to install 7. Alternatively, to check in each package one at a time, click on the Check In link in Action column. Each package is required to be installed for MER for epo. 8. Select I accept the terms in the license agreement. 9. Click Ok to install 10. To verify that MER for epo is installed, click Checked In Software - >Licensed 6. Enabling MER for epo events

9 9 By default, MER for epo 3.1 will automatically enable the MER specific epo events. 1. Go to Server Settings under Menu -> Configuration 2. Select Event Filtering in Setting Categories. 3. Click Edit. 4. Verify if the events from to are checked. If not, select all the events from to Click Save. 7. Configuring Policies

10 10 Before deploying the MER package on to the client computers, you should define policies for executing MER and saving the results. The administrator has the option to specify policy settings by group or for individual client computers. The options available in the policy are: Upload Settings, for uploading to a customer provided FTP or UNC server Storage Settings, for saving the results on the local machine Additional Log Settings 1. Go to Policy Catalog under Menu -> Policy 2. Select MER for epo 3.1 from the product drop-down list. 3. Click My Default and configure policy settings as desired. 4. To configure FTP and Anonymous FTP, enter the URL as either ftp://<ftpserver>/<subfolder> or <ftpserver>/<subfolder>, as ftp:// will be automatically added to the beginning of the server URL. Any subfolder must be included in the URL. Since the upload will be from the client machine, it must have connectivity to the server. To verify the FTP username and password configuration, use Verify Credentials. 5. To configure UNC, enter the server path as either \\<server>\<subfolder> or <server>\<subfolder>, as \\ will be automatically added to the beginning of the server URL. Any subfolder must be included in the URL. Since the upload will be from the client machine, it must have connectivity to the server. To verify the UNC username and password configuration, use Verify Credentials. A domain account is required for UNC and must be in the format of domain\user. 6. By default, the results are also saved on the client machine in %AllUsersProfile%\Application Data\McAfee\Supportability\MER for epo 7. Click Save to save policy settings.

11 11 8. Deploying the MER tool The MER tool needs to be deployed on the client computers before triggering the MER task. 1. Click Client Tasks Catalog under Menu -> Policy. 2. Select McAfee Agent under Client Task Types. 3. Click on New Task 4. In the popup box, select the Task Type as Product Deployment and click OK. 5. Enter a Task Name.

12 12 6. Leave Target platforms as Windows. MER for epo only supports Windows. 7. Select MER for epo 3.1 in Products and components and ensure Action is set to Install. 8. Click Save. 9. Assign the created task to the desired groups in the system tree and click OK 10. Ensure the task you just created is selected 11. Configure your desired scheduling options and click Save. 12. Select the Systems Tree tab. 13. Select the group or machines you assigned the scan task to.

13 Send an agent wake-up call to the selected machines. 15. The MER for epo files will be installed in the following directory of the computer: C:\Program files\mcafee\supportability\mer for epo on a 32-bit machine C:\Program Files (x86)\mcafee\supportability\mer for epo on a 64-bit machine 9. Run MER: MER is now ready to be executed on the client machines. 1. Click Client Tasks Catalog under Menu -> Policy. 2. Select MER for epo 3.1 under Client Tasks Type 3. Click on New Task 4. Click Ok to select the ScanTask type

14 14 5. Name the Task 6. Check Upload MER data to McAfee Support and enter your open SR number and address the SR was opened with. 7. By default, MER will detect the installed products automatically. If desired, select which product or products to collect data for. 8. To sanitize the results, check Remove IP addresses, MAC addresses, Domain names and Computer names from WebMER result file. 9. Click Save. 10. Assign the created task to the desired groups in the system tree and click OK 11. Ensure the task you just created is selected 12. Configure your desired scheduling options and click Save. 13. Select the Systems Tree tab. 14. Select the group or machines you assigned the scan task to. 15. Send an agent wake-up call to the selected machines. 10. Configuring MER for epo content update The MER for epo content update ensures that the MER tool is always running the latest version of the product collection scripts. 1. Click Client Tasks Catalog under Menu -> Policy. 2. Select McAfee Agent under Product List, and click New Task. 3. Select Product Update under Task Type.

15 15 4. Click on Ok. 5. On the configuration page, give the task a name and check the Selected Packages option. 6. Select MER for epo 3.1 under patches and Service packs. 7. Click Save. 8. Assign the created task to the desired groups in the system tree and click OK 9. Ensure the task you just created is selected 10. Configure your desired scheduling options and click Save. 11. Select the Systems Tree tab. 12. Select the group or machines you assigned the scan task to. 13. Send an agent wake-up call to the selected machines.