Showing results for 
Show  only  | Search instead for 
Did you mean: 

Help with ePO 4.0 repository setup

I have 6 building each with an Active directory server and approx. 350 client computers. I configured a repository on each one of these servers and I'm pushing the updates from ePO server to them. Can I configure/edit the repository list so each building will pull first from the server in that building without crossing the network? I know I can edit each PC manually, but in todays world, why should I have too. Any help would be greatly appreciated.


10 Replies
Level 7
Report Inappropriate Content
Message 2 of 11

RE: Help with ePO 4.0 repository setup

Providing configuration details at least ePO version will be appreciated.
My fortune teller says that for ePO 4.0 it might be achieved by creating separate groups
system->system tree
system->policy catalog->choose mcafee agent from drop down list
create separate policy. In policy setup on repositores path unmark repositories others than local one.
hope you'll manage....


I'm running ePO 4.5 on Win server 2003 and the clients are XP w/ sp3 running McAfee 8.7i. Thanks a bunch...

I was able to create this new policy and I can see it in Policy Catalog, although it says no assignments. I did a cut and paste of the repository windows, note the radio buttons did not show I put *'s next to the options I choose.

Repository list selection: Use this repository list *
Use other repository list

Select repository by: Ping time *
Ping timeout (seconds): [ Restore defaults ]

Subnet distance
Maximum number of hops: [ Restore defaults ]

Use order in repository list

Repository list: Exclude new distributed repositories by default
Name Type State Actions

ePO_colossus Global Enabled Edit | Delete | Enable |
Havok Global Disabled Edit | Delete | Enable |
Sabretooth Global Disabled Edit | Delete | Enable |
Juggernaut Global Disabled Edit | Delete | Enable |
Polaris Global Disabled Edit | Delete | Enable |
Karma Global Disabled Edit | Delete | Enable |
Rogue Global Enabled Edit | Delete | Disable |
McAfeeHttp Fallback Enabled Edit | Delete | Disable |

Buttons are "Add" "Move up" "Move Down"

(Move up and down are grayed out and whatever I do, I cannot rearrange the order of the reposoitory list) ( cannot edit them or delete them, I'm guessing because I created these as Distributed repositories)

I created my groups and sub groups like my active directory tree.

Building name (root OU)
Room number (sub OU)

Islip Arts Building
R200 (each have approx 25 pc's in it)

How do I assign this new policy for R200 ou?


RE: Ooopppsss


In your mcafee agent policy you should have all (appropriate) repositories enabled. Then just select SUBNET DISTANCE. What it does is that clients contact the local repository for updates. To check go to http://machine-name:8081 try one machine from each site and you should see them contacting their local repository.

I hope this makes sense and helps.

cheers, RB51

RE: Ooopppsss

Awesome, So I can make the change to the default policy?

let me check it.
Level 7
Report Inappropriate Content
Message 6 of 11

RE: Ooopppsss

I'll definitely suggest making copy of default policy and don't modify this. Just in case you will change to much – this gives you easy rollback...;)
Few words of explanations: I've some country branch offices, every office have it's own repository. Unfortunately some links between countries are poor quality and counting distance algorithm does not work properly. I’ve to hardcode which location can use which repository. I’ve achieved it using different policy for different locations (there were some other reasons to have separate policies per country).

RE: Ooopppsss

I also use different policies based on the location. We have some very large remote locations so those each have their own repository and also have their own policy that lists their repository first and they dont have other certain repositories listed in their policy because of the extremely slow connection between certain sites.

Edit the XML file

By playing around to see what other options I have, I noticed that I could export the policy as an xml file and rearrange the order how I see fit. Now how to import the new repository list on the fly.

- <Section name="InetManager">
<Setting name="DisabledSiteNum" value="0" />
<Setting name="SitelistOrderNum" value="8" />
<Setting name="SitelistOrder_0" value="ePO_colossus" />
<Setting name="SitelistOrder_1" value="Havok" />
<Setting name="SitelistOrder_2" value="Sabretooth" />
<Setting name="SitelistOrder_3" value="Juggernaut" />
<Setting name="SitelistOrder_4" value="Polaris" />
<Setting name="SitelistOrder_5" value="Karma" />
<Setting name="SitelistOrder_6" value="Rogue" />
<Setting name="SitelistOrder_7" value="McAfeeHttp" />
<Setting name="excludeReposByDefault" value="0" />
Level 7
Report Inappropriate Content
Message 9 of 11

RE: Edit the XML file

Using import button wink Hint:
don;t search in right bottom but at right 1/3 from top wink it let to import/export all policies - If you would screw up something.... Why not use moving up and down interface?

RE: Edit the XML file

I don't want to have to import the .xml file on every pc.

The up/down interface is grayed out in the repository tab.
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community