cancel
Showing results for 
Search instead for 
Did you mean: 
haaris
Level 10

Task enforcement when solidcore local CLI is allowed

Jump to solution

As per my knowledge when solidcore local CLI is not lockdown then it will not take any policy and task push from epo but I had created a run command task to lockdown the solidcore from epo,it loaded successfully and solidcore went to lockdown mode.

Please correct me if am wrong and provide your valuable suggestions.

0 Kudos
1 Solution

Accepted Solutions
neelima
Level 12

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Haaris,

I have confirmed internally.

That is the only task that is allowed when CLI is recovered because it helps toggle the CLI lockdown status.

10 Replies
neelima
Level 12

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Haaris,

Let me confirm and get back. Again, filing a support case maybe the fastest way to resolve this because it may be a policy application scerio too.

Thanks,

Neelima

0 Kudos
haaris
Level 10

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Neelima,

Have you got something???

0 Kudos
neelima
Level 12

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

You will find details about it in the product guide for MAC 6.1 FAQs section and MAC CLI guide.See recover and lockdown commands.

All the documents are publicly posted and you can look them up by simply searching for them on google.

NOTE: There are implications of recovering CLI for ePO managed nodes(covered in Product Guide). Do keep that in mind when you recover the node for troubleshooting.

0 Kudos
neelima
Level 12

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Latest MAC CLI Guide can be found here.

Latest MAC Product Guide can be found here.

0 Kudos
haaris
Level 10

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

BThanks Neelima,

But its written which i had already told you that polices cant be pushed when solidcore local CLI is in recover mode.

But i tried as mentioned earlier and it pushed....

0 Kudos
neelima
Level 12

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

I am confirming about that.

Stay tuned.

0 Kudos
Artfulbodger
Level 13

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Hi All.

From page 134 of the 6.1.0 Solidcore (ePO) product Guide (FAQs):

To troubleshoot or debug issues, you might need to recover the local CLI access for an endpoint. Note that recovering the local CLI for an endpoint prevents the enforcement of policies from McAfee ePO to the endpoint. This implies that when the CLI is recovered for an endpoint, no existing or new policies (created on the McAfee ePO console) are applied to that endpoint.

Regards

Rich

0 Kudos
haaris
Level 10

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Dear Richard,

I had already gone with what you are trying to say but in practical I faced something different mentioned already.

0 Kudos
neelima
Level 12

Re: Task enforcement when solidcore local CLI is allowed

Jump to solution

Haaris,

I have confirmed internally.

That is the only task that is allowed when CLI is recovered because it helps toggle the CLI lockdown status.