EPO 5.10 Way to control defender and show version?

[KeithM]

Hi all

On a server workgroup with win 2016 and a centralised EPO, is there a way from the ePO to directly control Windows Defender policy?  Is there an extension maybe that is needed to ePO to  allow this?

Also is there a way to tell what version of Defender is installed on a McAfee client from the centralised ePO?  Can it be viewed from the Dashboards somehow?

Many thanks 

[cdinet]

Are you referring to using this with MVision epo or on prem epo?  MVision epo already utilizes MVision Endpoint, which manages windows defender.  For on-prem epo, you would need to install the extensions and for both, deploy the product to the client systems.  Keep in mind that this would replace either ens or Virusscan.

[KeithM]

Hi thanks for reply. I believe I have MVision epo. It uses mvision endpoint 2107. Can I get the ePO to display what version of Defender is installed, either locally or on clients? Thanks

[aguevara]

On your system tree you can select the machine and it will display this properties, here are some screenshots from my lab:

First select the product under the Products Tab:



Then scroll down a bit and you will see this properties:

Regards

Alejandro

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

[KeithM]

Thanks alejandro Can the "dashboards" view be customised to display any of that Windows defender information? I suspect Anti-virus signature version would be the most important and last update. can that be shown on dashboards so our end users can easily see? Many thanks

[aguevara · Accepted solution]

There is no default dashboard/ query that can be used but you can create a new query and then use that query to display you this info on a dashboard, the query can be created like this:



then select Pie chart and from the drop down menu select the desired property:




click next and then save the query by giving it a name first:



Navigate to Dashboards  and click Dashboard Actions> New and give a name to your new dashboard and then click Add monitor

From the "Category" section select "queries" and drag and drop the queries icon to the newly created monitor:

A new window will show up and this is where you can choose your custom query:

once done click Save:

Regards

Alejandro

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?