cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Level 7
Report Inappropriate Content
Message 1 of 5

Rollback remediation

Jump to solution
Hello, I have read about Rollback remediation that can roll back files encrypted by ransomware. I would like to know how it works and if anybody has some experience with it. Is it available for all ENS and ePO on prem or just with MVision? Thank you for your help!
1 Solution

Accepted Solutions
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Rollback remediation

Jump to solution

There is a separate License for ATP and ATP will come with ENS only , There is no appliance for ATP (Afafik) This will comes in ENS-ATP Bundle.

You can use your grant number to check the associated products with your Grant.

For TIE, ATP is needed.

If mentioned products are not there you can connect with your Sales Account Manager or Sales Team.

https://www.mcafee.com/enterprise/en-us/about.html

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

View solution in original post

4 Replies
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 5

Re: Rollback remediation

Jump to solution

Hello @aneta5 

Thanks for your post!

This will work with with ENS-ATP.

This is working with ePO-On premise as well.

https://docs.mcafee.com/bundle/endpoint-security-10.7.x-common-product-guide-windows/page/GUID-11484...

How does rollback remediation work?
A: When malware attempts to compromise and endpoint, malicious actions like calling on executables that grant system access or filenames are altered to deliver a payload. With McAfee Endpoint Security rollback remediation enabled, a system snapshot is established and changes that are made are recorded.
When McAfee Endpoint Security detects threats, rollback remediation will automatically reverse the system changes made and return a system to its previously healthy state.
This keeps the user and system productive while also saving a support call and a potential lengthy
remediation period if a system re-image would have been required.

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Highlighted
Level 7
Report Inappropriate Content
Message 3 of 5

Re: Rollback remediation

Jump to solution

Do I have to buy an ATP appliance? Do I need TIE server?

McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 5

Re: Rollback remediation

Jump to solution

There is a separate License for ATP and ATP will come with ENS only , There is no appliance for ATP (Afafik) This will comes in ENS-ATP Bundle.

You can use your grant number to check the associated products with your Grant.

For TIE, ATP is needed.

If mentioned products are not there you can connect with your Sales Account Manager or Sales Team.

https://www.mcafee.com/enterprise/en-us/about.html

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

View solution in original post

Highlighted
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 5 of 5

Re: Rollback remediation

Jump to solution

I thought ATP was now bundled with ENS as of this past month? 

 

Dave

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community