cancel
Showing results for 
Search instead for 
Did you mean: 

ePO timed Recieve/Generated

Hi,

Can I adjust the Event Receive time as per my screenshot it took days before I receive the Event.

epo.png

Please kindly move to ePO section, I can't post my question in that discussion, I don't know why?

1 Reply
Reliable Contributor Daniel_S
Reliable Contributor
Report Inappropriate Content
Message 2 of 2

Re: ePO timed Recieve/Generated

Well this depends on where the event was generated. As it shows threat-event i suggest it is some event on a client.

So as long as the client has no connection to the EPO there is no possibility of receiving the event.

For example: employee is outside corporate network on monday and get´s an infection. VSE notices it and does a clean. Corresponding events are generated.

On tuesday he connects to the company network and the agent is able to upload the events to the EPO.

You would receive the events a day later.

How can you circumvent this?

Install an Agent-Handler in your DMZ.

As long as your clients have internet-connection you will directly see the events on your EPO.

As long as they don´t there is no chance.

Best regards

Dan

Best regards
Dan
More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator