Policy not working on Win 10 Client

[User39866432]

Hi Adithyan

This is an offline server so I would need to install these manually

Dose this mean I need to install 'McAfee_Endpoint_Security_10.7.0.977.20_standalone_client_install'

Below are the files I have downloaded, I have applied all the extensions

[User39866432]

OK, think I have got it see below, is this all I need? and if so is this all I need t do?

[AdithyanT]

Hi @User39866432,

Yes! This looks perfect! Now, the second step is optional, but I would still recommend you to do this step now

--> Open the task you created for deployment and please add the Endpoint Security Platform package for 10.7 above Endpoint Security Threat Prevention that you have already in place and save the task.

--> Now please do a wake up call and check if the deployment happens successfully now.

If it fails , please check the below folder on the endpoint:

C:\Widnows\Temp\McAfeeLogs

This folder should contain the deployment logs if the installer was started on the machine by McAfee Agent. We can then start our investigation from there!

[User39866432]

OK, thats great, ENS seems to have transferred to the clients and all systems are running OK and not giving the the issues I had before with the clients not being able to log in 

When updates are release for DLP and ENS, what is the set wat to update them on the epo server. is it a matter of changing the Assigned client Task. As this is an offline system is it possible to use the internet connected server to pull the updates down, so would these updates be included in the 'Current' directory. 

[AdithyanT]

Hi @User39866432,

Brilliant! As far as updates go, endpoints should be able to pull it from the ePO IF you have a Product Update task assigned to it to pull down "Amcore", "Exploit Prevention Content" and "Engine" updates.

This will ensure the product remains updated with the latest signatures.

But This will not ensure that the product runs the latest versions! Upgrading to the latest version is a manual task where you have to check in the latest version when it is released and use a similar method to deploy them on the machine.

[AdithyanT]

Hi @User39866432,

If the ePO Server is offline, typically we should be checking in everything on the list except for standalone client and the package designer.

However, if the endpoint on which you are trying to install endpoint security is offline, then only for those specific machine the standalone installer will be useful where unzip the package and run the setup file.