Accept connections only from the ePO server

[itsec_athena]

Can anyone explain to me the impact of checking/unchecking "Accept connections only from the ePO server" option found on the general category for Product: McAfee Agent.

We are using ePO 4.5.

If this option is unchecked, does this allow computers to pull latest VSE/HIPS DAT version from the internet if there is no LAN/VPN connection available?

Will these also allow users to update scan engine version, patches or release versions?

What is the effect if this option is checked?

Please advise.

Thanks.

[rackroyd]

To be honest this setting is only relevant if you are using separate Agent Handlers.

If enabled, the agent would ignore requests from anything but the actual ePO server.

The setting has no impact on repository or internet update access.

[itsec_athena]

Thanks

[georgec]

It's used for wake-up calls and remote access log. Remote access log is the agent log displayed in the browser. if you uncheck that, you'll able to see it from any machine (which helps in some cases).

George

[rackroyd]

That's a side-effect yes, but the primary reason for the setting is for Agent Handlers.

[maxsteel12]

rackroyd

is right it is only prevent connection from remote agent handler.

Rashid

[itsec_athena]

Thanks

[itsec_athena]

Thanks