cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Agent Handler configuration.

We are planning to create new Agent Handler, currently we have ePO server and agent handler in same location. So can we configure new handler on same location? or need to choose another location for balancing and other reason ? Please suggest.
7 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 8

Re: Agent Handler configuration.

Hello,

Please check below link for more information: Page 253 

http://b2b-download.mcafee.com/products/evaluation/ePO/Enterprise/5.10.0/Documantation/ProductGuide/...

Agent Handlers route communication between agents and your McAfee ePO server.
Each McAfee ePO server contains a master Agent Handler. Additional Agent Handlers can be installed on systems throughout your network.

How to use ePolicy Orchestrator in a DMZ or NAT environment

https://kc.mcafee.com/corporate/index?page=content&id=KB59218

KB66797 is for all the required ports

https://kc.mcafee.com/corporate/index?page=content&id=KB66797


Yes, Agent Handlers can load balance the McAfee Agent requests in a large remote
network. 

Use Agent Handlers in di΍erent geographic regions instead of multiple McAfee ePO servers.

You can install the Agent handler in the same environment as well as in DMZ.

If you are installing in the DMZ in that case please make sure that there is a connectivity between ePO and ePO DB.

This Agent Handler connection requires access to both the SQL database and the McAfee ePO server.

If you will go through the link in the post will give you more information in regards to the Agent handler.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 8

Re: Agent Handler configuration.

One other thing to consider is that an agent handler should be in the same datacenter as the sql server, as it will need a connection < 10ms. Otherwise you will end up with a lot of timeouts with sql connections and that can cause a lot of issues.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted

Re: Agent Handler configuration.

In this case, for businesses with office locations in various regions (For ex. India, Dubai, UK, HK, AUS), where the connections back to their McAfee DB data center (e.g. North America) are higher than 10ms,  what would be their options if they need something to manage local Agent requests and for McAfee AV product deployments? 
Without a local agent handler serving the region, it will be very slow for systems in Aus or India (especially those that are off-site) to connect all the way back to North America for AV updates and product deployment.

 

Thanks,
Perry

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 8

Re: Agent Handler configuration.

You can place Distributed Repository across your GEO locations. Have a look at the below product guide from Page 225

http://b2b-download.mcafee.com/products/evaluation/ePO/Enterprise/5.10.0/Documantation/ProductGuide/...

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: Agent Handler configuration.

To add to what @LKS said, superagent repositories with lazy caching instead of replication (don't do both) might be the most efficient way to go, as that uses less bandwidth and the sites will stay as up to date sites.  It also doesn't require credentials that sometimes change and cause account lockout issues.

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Highlighted

Re: Agent Handler configuration.

Can we use Agent handler as Super Agent repository also?

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 8 of 8

Re: Agent Handler configuration.

No, Agent handler is not meant to use as Distributed Repository. It is meant to use for Load Balancer. Repositories, for example SuperAgents, distribute large files throughout an organization. Repositories do not contain any logic. Agent Handlers use logic to communicate events back to the database. These events tell the McAfee Agent when to download new products from the distributed repositories. Agent Handlers can cache files from the distributed repositories, but don't use them to replace distributed repositories. Agent Handlers are used to reduce the event management load on the McAfee ePO
server.

Also Agent Handler relatively requires high speed connectivity. The handler also has to provide sitelist, policy task details to the agent as just as EPO. 

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community