cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
kovarczi
Level 8
Report Inappropriate Content
Message 1 of 4

Migration from Active Response

Jump to solution

Hi guys,

 

we want to migrate from MAR 2.4 to MVISION EDR.

So first problem that we can not make getting started for MVISION EDR (MVISION INSIGHTS works properly) with following error:

there is no epo connected to account

We want to use on-prem ePO, which is weird but i work with support on it.

 

But it is not clear for me how can i use MVISION EDR besides MAR.

We have a MAR environment (MAR server, DXL HUBs, multiple ePO, TIE) and it works properly.

We will migrate to MVISION EDR but how?

Because first of all after licensing changing (MAR -> MVISION license package) we have a connection issue with ePO cloud (based of MAR). And secondly it is not clear that how can i do the migration process. Because the guide says that install MVISION EDR extension, package and remove MAR extension and everything is fine...

But of course we will slowly migrate the clients to MVISION EDR, stp-by-step so we want to use both solution fo a while (MVISION Cloud AND ePO Cloud tenant). Is it a working scenario?

And regarding the guide, MAR client can communicate with MVISION EDR cloud service:

https://docs.mcafee.com/bundle/mvision-endpoint-detection-and-response-product-guide/page/GUID-E5039...

 

Is it true? So what is the best practice for migration?

 

BR,

k

 

1 Solution

Accepted Solutions
AdithyanT
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Migration from Active Response

Jump to solution

Hi @kovarczi,

Thank you for your post.

let us address your queries step by step. Firstly, the migration guide you are referring to is as follows:

https://docs.mcafee.com/bundle/mvision-endpoint-detection-and-response-install-guide/page/GUID-FC03A...

As mentioned here, You have to check in EDR extensions. Now for setting up EDR, please follow the below documentation:

https://docs.mcafee.com/bundle/mvision-endpoint-detection-and-response-install-guide/page/GUID-81403...

As per above, first, please activate your EDR account, which I believe you have already done. now to link it with an ePO, follow the below steps from the linked migration guide:

  1. On McAfee ePO, select Menu  Server Settings  MVISION Cloud Bridge.
  2. Click Edit.
  3. On the Edit MVISION Cloud Bridge page, enter the email address and password created for MVISION EDR and click Save.
  4. On MVISION Cloud Bridge, check if the Status is successful.

Please ensure your DXL brokers are able to connect to their respective EDR cloud URLs. Where to connect is defined in the below steps (This is a par of the EDR installation document as well):

  1. Open the ePO manager.
  2. Click Menu, Server Settings, DXL Cloud Databus.
  3. Verify that your data center is populated with the correct location info as listed below, correct any mistakes as needed:

You can perform connectivity check and check for proxy usage as defined in this KBA below:

https://kc.mcafee.com/corporate/index?page=content&id=KB93645

Also, yes, MAR clients will still be able to send trace data to MVISION EDR provided your DXL is setup and connected as above.

As always, feel free to create a service Request with us if you run into any specific issues and we will be glad to guide you through the troubleshooting and assist you further on the same.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T

View solution in original post

3 Replies
AdithyanT
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Migration from Active Response

Jump to solution

Hi @kovarczi,

Thank you for your post.

let us address your queries step by step. Firstly, the migration guide you are referring to is as follows:

https://docs.mcafee.com/bundle/mvision-endpoint-detection-and-response-install-guide/page/GUID-FC03A...

As mentioned here, You have to check in EDR extensions. Now for setting up EDR, please follow the below documentation:

https://docs.mcafee.com/bundle/mvision-endpoint-detection-and-response-install-guide/page/GUID-81403...

As per above, first, please activate your EDR account, which I believe you have already done. now to link it with an ePO, follow the below steps from the linked migration guide:

  1. On McAfee ePO, select Menu  Server Settings  MVISION Cloud Bridge.
  2. Click Edit.
  3. On the Edit MVISION Cloud Bridge page, enter the email address and password created for MVISION EDR and click Save.
  4. On MVISION Cloud Bridge, check if the Status is successful.

Please ensure your DXL brokers are able to connect to their respective EDR cloud URLs. Where to connect is defined in the below steps (This is a par of the EDR installation document as well):

  1. Open the ePO manager.
  2. Click Menu, Server Settings, DXL Cloud Databus.
  3. Verify that your data center is populated with the correct location info as listed below, correct any mistakes as needed:

You can perform connectivity check and check for proxy usage as defined in this KBA below:

https://kc.mcafee.com/corporate/index?page=content&id=KB93645

Also, yes, MAR clients will still be able to send trace data to MVISION EDR provided your DXL is setup and connected as above.

As always, feel free to create a service Request with us if you run into any specific issues and we will be glad to guide you through the troubleshooting and assist you further on the same.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
kovarczi
Level 8
Report Inappropriate Content
Message 3 of 4

Re: Migration from Active Response

Jump to solution

Dear AdithyanT,

 

thank you very much!

DXL Databus URL was an old one.

It works!

 

Thank you!

 

BR,

k

AdithyanT
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Migration from Active Response

Jump to solution

Hi @kovarczi,

Thank you for letting us know what worked for you and marking the solution here.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community