cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

How do I manage machines inside the DMZ in Epo?

How do I manage machines in Epo inside the DMZ?

I just need tomake sure it gets the latest updates really.

Thanks

4 Replies
Highlighted

Re: How do I manage machines inside the DMZ in Epo?

You should administer your firewall an open few ports.

Have a look at your ePo Configuration:

Configuration -> Server Settings -> Ports

Firewall rule DMZ -> ePo Server

Agent-to-server communication port: 80 (Standard)

Firewall rule ePo -> DMZ

Agent wake-up communication port:8081 (Standard)

Agent broadcast communication port:8082 (Standard)

See also KB66797:

https://kc.mcafee.com/corporate/index?page=content&id=KB66797

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 5

Re: How do I manage machines inside the DMZ in Epo?

Just to expand on this a little:

If you are using ePO 4.5 and MA 4.5, then you need to open the Agent To Server Secure Communication Port (443 by default) from the DMZ to the ePO server

You only need to open the Agent Broadcast Communication Port (82 by default) if the agent in the DMZ is a superagent.

Regards -

Joe

Highlighted

Re: How do I manage machines inside the DMZ in Epo?

If you are using ePO 4.5 - Agent Handler implementation is a secure way to distribute products and updates for clients in DMZ and internet.

- AB

Highlighted
Level 10
Report Inappropriate Content
Message 5 of 5

Re: How do I manage machines inside the DMZ in Epo?

We are also looking at using Agent Handlers to manage machines in various network zones but the fact that the AH needs direct access to the SQL server is offputting. It is obviously not primarily designed as a connection point in hostile networks but as a way to load balance agent connections for scalability purposes.

In a properly DMZ friendly setup no connections should be allowed from the less secure (e.g. DMZ, internet etc) into a more secure (intranet, ASZ etc) zone and certainly not the raw SQL protocol.

We now have to look at implementing reverse proxies or other ways of tunnelling the connection.

Thanks,

Matt

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community