Hi,
I'm currently trying to understand (and follow) the reputation flow of information.
As we can read in the guide :
How Adaptive Threat Protection works - McAfee Endpoint Security 10.7.x
- A user executes a file on the client system.
Adaptive Threat Protection checks the local reputation cache for the file.
- If the file is not in the local reputation cache, ATP queries the TIE server, if available, for the reputation.
First of all, ATP checks for the local reputation cache, but where exactly is this cache? I cant seem to find the information in any guide or on the products themselves.
Is it the TIE Reputation section in Systems of the ePO console? I believe its rather the reputation entries of the TIE Server?
Again, I'm a complete beginner in the solution, I hope my question is not too embarassing.
Thank you for your time,
GC