cancel
Showing results for 
Search instead for 
Did you mean: 
zade
Level 7
Report Inappropriate Content
Message 1 of 8

Agent-to-server communication interval and policy enforcement interval

Jump to solution

Hi guys,

I wanted to double check what interval you were using in your environments, we currently have ours set to 60 minutes. The reason I ask is because I have recently been working with our desktop support team and they want to make sure that after deploying a new laptop or desktop that the agent and virus scan on pushed onto the machine as soon as possible. I've noticed that sometimes it can take a while for virus scan to be deployed automatically and figured that this could be why. (Having the interval set to 60 minutes). Is it worth bringing this down so that once the agent has been pushed onto the new machine, and an install of virus scan will be deployed asap.

1 Solution

Accepted Solutions
Reliable Contributor frank_enser
Reliable Contributor
Report Inappropriate Content
Message 2 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

I usually implement the following to speed up deployment:

- create a "deploy" policy with ASCI 15 minutes and assign it to the top of the system tree

- assign a TAG to all systems that have all necessary products installed (like "ProductsInstalled")

- create a "default" policy with ASCI 60 minutes (or what is reasonable within the organisation) and assign it with a policy assignment rule to the TAG "ProductsInstalled"

Result:

Systems which have not all defined products have a ASCI of 15min and the rest have 60min.

View solution in original post

7 Replies
Reliable Contributor frank_enser
Reliable Contributor
Report Inappropriate Content
Message 2 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

I usually implement the following to speed up deployment:

- create a "deploy" policy with ASCI 15 minutes and assign it to the top of the system tree

- assign a TAG to all systems that have all necessary products installed (like "ProductsInstalled")

- create a "default" policy with ASCI 60 minutes (or what is reasonable within the organisation) and assign it with a policy assignment rule to the TAG "ProductsInstalled"

Result:

Systems which have not all defined products have a ASCI of 15min and the rest have 60min.

View solution in original post

zade
Level 7
Report Inappropriate Content
Message 3 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

This sounds great frank, what is the best way to create a tag and select systems that have all of the necessary products installed? Could you provide me with some steps?

zade
Level 7
Report Inappropriate Content
Message 4 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

I dont seem to find anything which I could use inside the tag criteria?

Reliable Contributor frank_enser
Reliable Contributor
Report Inappropriate Content
Message 5 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

Correct, you must apply the TAG via server task query sub action.

  1. Create a query which returns all systems that don't have all the necessary software installed.
  2. Create server task which executes the query and choose sub task which applies the TAG.
  3. Schedule the server task every x minutes/hours.
zade
Level 7
Report Inappropriate Content
Message 6 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

Nice one Frank, will test this out 🙂

zade
Level 7
Report Inappropriate Content
Message 7 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

What would you recommend selecting in the query to pick up products installed?

Reliable Contributor frank_enser
Reliable Contributor
Report Inappropriate Content
Message 8 of 8

Re: Agent-to-server communication interval and policy enforcement interval

Jump to solution

And don't forget to clear the TAG before running the assignment, or else systems which now lack software still hold the tag.

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community