cancel
Showing results for 
Search instead for 
Did you mean: 

Creating Automatic Responses for MVT in ePO

Jump to solution

Hi all,

The instructions in the McAfee Virtual Technician documentation which deal with creating Automatic Responses in ePO are a little confusing.  They say to set the "Detecting Product" filter to ePO-MVT, but that filter isn't an option in version 4.5.  I'm also unsure if this should be a client or a server rule.

If anyone has set one of these responses up and can share their configuration, I'd appreciate it!

Thanks,

- Steve

1 Solution

Accepted Solutions
fconde
Level 9
Report Inappropriate Content
Message 3 of 4

Re: Creating Automatic Responses for MVT in ePO

Jump to solution

Steve,

ePO-MVT Automatic response only works with "Threat" Event types. Hence, when selecting Server or Client event types, may cause some confusion.

We will be updating the documentation to reflect the following change:  "4.  Select the Event group as ePO Notification events and the Event type "Threat" that trigger this response."

Moreover, when Event type is "Threat", on the Filter page "SUPPMVT1000" will be listed under "Detecting Product" for ePO-MVT.  However, before SUPPMVT1000 can be seen in the detecting product list, events must be sent first from the nodes back to the ePO server. Only then, EPO will detect the products and will appear in the detecting products list.  We will also update the documentation to reflect this change.

Regards

3 Replies
fconde
Level 9
Report Inappropriate Content
Message 2 of 4

Re: Creating Automatic Responses for MVT in ePO

Jump to solution

Steve,

First, thank you for you interest in ePO-MVT.  Please do not hesitate in letting what you think about it as well as any possible recommendation.

Regarding you question about setting up the automatic notification for ePO-MVT,  we are clarifying the steps and will contact you shortly.  We will also update the documentation accordingly.

Regards

fconde
Level 9
Report Inappropriate Content
Message 3 of 4

Re: Creating Automatic Responses for MVT in ePO

Jump to solution

Steve,

ePO-MVT Automatic response only works with "Threat" Event types. Hence, when selecting Server or Client event types, may cause some confusion.

We will be updating the documentation to reflect the following change:  "4.  Select the Event group as ePO Notification events and the Event type "Threat" that trigger this response."

Moreover, when Event type is "Threat", on the Filter page "SUPPMVT1000" will be listed under "Detecting Product" for ePO-MVT.  However, before SUPPMVT1000 can be seen in the detecting product list, events must be sent first from the nodes back to the ePO server. Only then, EPO will detect the products and will appear in the detecting products list.  We will also update the documentation to reflect this change.

Regards

Re: Creating Automatic Responses for MVT in ePO

Jump to solution

Hi Francois,

Thanks very much for the help!

Best,

- Steve

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community