Agent Handler configuration.

[User30455258]

We are planning to create new Agent Handler, currently we have ePO server and agent handler in same location. So can we configure new handler on same location? or need to choose another location for balancing and other reason ? Please suggest.

[vivs]

Hello,

Please check below link for more information: Page 253 

http://b2b-download.mcafee.com/products/evaluation/ePO/Enterprise/5.10.0/Documantation/ProductGuide/...

Agent Handlers route communication between agents and your McAfee ePO server.
Each McAfee ePO server contains a master Agent Handler. Additional Agent Handlers can be installed on systems throughout your network.

How to use ePolicy Orchestrator in a DMZ or NAT environment

https://kc.mcafee.com/corporate/index?page=content&id=KB59218

KB66797 is for all the required ports

https://kc.mcafee.com/corporate/index?page=content&id=KB66797


Yes, Agent Handlers can load balance the McAfee Agent requests in a large remote
network. 

Use Agent Handlers in di΍erent geographic regions instead of multiple McAfee ePO servers.

You can install the Agent handler in the same environment as well as in DMZ.

If you are installing in the DMZ in that case please make sure that there is a connectivity between ePO and ePO DB.

This Agent Handler connection requires access to both the SQL database and the McAfee ePO server.

If you will go through the link in the post will give you more information in regards to the Agent handler.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[cdinet]

One other thing to consider is that an agent handler should be in the same datacenter as the sql server, as it will need a connection < 10ms. Otherwise you will end up with a lot of timeouts with sql connections and that can cause a lot of issues.

[mcafee_perry]

In this case, for businesses with office locations in various regions (For ex. India, Dubai, UK, HK, AUS), where the connections back to their McAfee DB data center (e.g. North America) are higher than 10ms,  what would be their options if they need something to manage local Agent requests and for McAfee AV product deployments? 
Without a local agent handler serving the region, it will be very slow for systems in Aus or India (especially those that are off-site) to connect all the way back to North America for AV updates and product deployment.

Thanks,
Perry

[LKS]

You can place Distributed Repository across your GEO locations. Have a look at the below product guide from Page 225

http://b2b-download.mcafee.com/products/evaluation/ePO/Enterprise/5.10.0/Documantation/ProductGuide/...

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!

[cdinet]

To add to what @LKS said, superagent repositories with lazy caching instead of replication (don't do both) might be the most efficient way to go, as that uses less bandwidth and the sites will stay as up to date sites.  It also doesn't require credentials that sometimes change and cause account lockout issues.

[User30455258]

Can we use Agent handler as Super Agent repository also?

[LKS]

No, Agent handler is not meant to use as Distributed Repository. It is meant to use for Load Balancer. Repositories, for example SuperAgents, distribute large files throughout an organization. Repositories do not contain any logic. Agent Handlers use logic to communicate events back to the database. These events tell the McAfee Agent when to download new products from the distributed repositories. Agent Handlers can cache files from the distributed repositories, but don't use them to replace distributed repositories. Agent Handlers are used to reduce the event management load on the McAfee ePO
server.

Also Agent Handler relatively requires high speed connectivity. The handler also has to provide sitelist, policy task details to the agent as just as EPO. 

Was my reply helpful?

If you find this post useful, please give it a Kudos! Also, please don't forget to select "Accept as a Solution" if this reply resolves your query!