cancel
Showing results for 
Search instead for 
Did you mean: 
Reliable Contributor haaris
Reliable Contributor
Report Inappropriate Content
Message 1 of 11

Task enforcement when solidcore local CLI is allowed

Jump to solution

As per my knowledge when solidcore local CLI is not lockdown then it will not take any policy and task push from epo but I had created a run command task to lockdown the solidcore from epo,it loaded successfully and solidcore went to lockdown mode.

Please correct me if am wrong and provide your valuable suggestions.

1 Solution

Accepted Solutions
Highlighted
neelima
Level 12
Report Inappropriate Content
Message 10 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Haaris,

I have confirmed internally.

That is the only task that is allowed when CLI is recovered because it helps toggle the CLI lockdown status.

10 Replies
neelima
Level 12
Report Inappropriate Content
Message 2 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Haaris,

Let me confirm and get back. Again, filing a support case maybe the fastest way to resolve this because it may be a policy application scerio too.

Thanks,

Neelima

Reliable Contributor haaris
Reliable Contributor
Report Inappropriate Content
Message 3 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Neelima,

Have you got something???

neelima
Level 12
Report Inappropriate Content
Message 4 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

You will find details about it in the product guide for MAC 6.1 FAQs section and MAC CLI guide.See recover and lockdown commands.

All the documents are publicly posted and you can look them up by simply searching for them on google.

NOTE: There are implications of recovering CLI for ePO managed nodes(covered in Product Guide). Do keep that in mind when you recover the node for troubleshooting.

neelima
Level 12
Report Inappropriate Content
Message 5 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Latest MAC CLI Guide can be found here.

Latest MAC Product Guide can be found here.

Reliable Contributor haaris
Reliable Contributor
Report Inappropriate Content
Message 6 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

BThanks Neelima,

But its written which i had already told you that polices cant be pushed when solidcore local CLI is in recover mode.

But i tried as mentioned earlier and it pushed....

neelima
Level 12
Report Inappropriate Content
Message 7 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

I am confirming about that.

Stay tuned.

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Hi All.

From page 134 of the 6.1.0 Solidcore (ePO) product Guide (FAQs):

To troubleshoot or debug issues, you might need to recover the local CLI access for an endpoint. Note that recovering the local CLI for an endpoint prevents the enforcement of policies from McAfee ePO to the endpoint. This implies that when the CLI is recovered for an endpoint, no existing or new policies (created on the McAfee ePO console) are applied to that endpoint.

Regards

Rich

Reliable Contributor haaris
Reliable Contributor
Report Inappropriate Content
Message 9 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Dear Richard,

I had already gone with what you are trying to say but in practical I faced something different mentioned already.

Highlighted
neelima
Level 12
Report Inappropriate Content
Message 10 of 11

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Haaris,

I have confirmed internally.

That is the only task that is allowed when CLI is recovered because it helps toggle the CLI lockdown status.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community