Agent Handler configuration.

[User30455258]

We are planning to create new Agent Handler, currently we have ePO server and agent handler in same location. So can we configure new handler on same location? or need to choose another location for balancing and other reason ? Please suggest.

[vivs]

Hello,

Please check below link for more information: Page 253 

http://b2b-download.mcafee.com/products/evaluation/ePO/Enterprise/5.10.0/Documantation/ProductGuide/...

Agent Handlers route communication between agents and your McAfee ePO server.
Each McAfee ePO server contains a master Agent Handler. Additional Agent Handlers can be installed on systems throughout your network.

How to use ePolicy Orchestrator in a DMZ or NAT environment

https://kc.mcafee.com/corporate/index?page=content&id=KB59218

KB66797 is for all the required ports

https://kc.mcafee.com/corporate/index?page=content&id=KB66797


Yes, Agent Handlers can load balance the McAfee Agent requests in a large remote
network. 

Use Agent Handlers in di΍erent geographic regions instead of multiple McAfee ePO servers.

You can install the Agent handler in the same environment as well as in DMZ.

If you are installing in the DMZ in that case please make sure that there is a connectivity between ePO and ePO DB.

This Agent Handler connection requires access to both the SQL database and the McAfee ePO server.

If you will go through the link in the post will give you more information in regards to the Agent handler.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[cdinet]

One other thing to consider is that an agent handler should be in the same datacenter as the sql server, as it will need a connection < 10ms. Otherwise you will end up with a lot of timeouts with sql connections and that can cause a lot of issues.

[mcafee_perry]

In this case, for businesses with office locations in various regions (For ex. India, Dubai, UK, HK, AUS), where the connections back to their McAfee DB data center (e.g. North America) are higher than 10ms,  what would be their options if they need something to manage local Agent requests and for McAfee AV product deployments? 
Without a local agent handler serving the region, it will be very slow for systems in Aus or India (especially those that are off-site) to connect all the way back to North America for AV updates and product deployment.

Thanks,
Perry

[LKS]

You can place Distributed Repository across your GEO locations. Have a look at the below product guide from Page 225

http://b2b-download.mcafee.com/products/evaluation/ePO/Enterprise/5.10.0/Documantation/ProductGuide/...

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[cdinet]

To add to what @LKS said, superagent repositories with lazy caching instead of replication (don't do both) might be the most efficient way to go, as that uses less bandwidth and the sites will stay as up to date sites.  It also doesn't require credentials that sometimes change and cause account lockout issues.