How does Relay Server work ?

[mr54]

Hi,

I would like to know if it was possible to use the Relay Server founctionnality even if the communication between ePO and the MA is working.

I have to limit the communication between my endpoints and ePO  even if they can communicate, but I don't know how to do that.

I don't want to use an agent handler by the way, I really want to know if I can manage with Relay Server and how to do it.

Thank you

[Hawkmoon]

Hi mr54,

The 'relay server' setup relates to the McAfee Agent (MA policty) itself. It is reliant on the MA 'agent to server  communication interval' (ASCI) for its operation.

Such a setup allows the agent to 'fallback' to other devices if the ePO server or agent handlers (AH) cannot be reached.
As your communication between the clients and the ePO server are working, the clients will always communicate with the ePO server first.

Think of it as a sort of round robin operation, where the relay server communication will always be tried last after all else fails.

As you wish to manage (to reduce) your connections to the ePO server you should setup an Agent Handler to do that, it is a feature of an AH servers operation.

For example you have:

x1 ePO server
with
x100,000 clients

This means the ePO will have to server 100,000 client connections along side its daily operations of  server tasks, run reports and queries as the company/estate requires.

If you have:

x1 ePO server
&
x4 remote Agent handlers
with
x100,000 clients.

The 4 agent handlers can be configured to manage 50,000 connects each and so leave ePO to run tasks, reports and queries but to only manage 4 Agent handler connections.

The ePO product guide offers some examples of how such a setup can be achieved.

[mr54]

Hi Hawkmoon,

Thanks a lot for your reply !

So, I don't have any way to block the communication between ePO and my endpoints  to enforce the MA to only communicate with my Relay Server ? With using Firewall rules for example ?

[cdinet · Accepted solution]

Please check kb91096 to see if that answers your questions.

[mr54]

It doesn't answer all my questions but it's good ! Thank you !

I will continue my investigations !

[cdinet]

Let us know what other questions you might have.