cancel
Showing results for 
Search instead for 
Did you mean: 

How to enforce a new policy for an endpoint immediately?

Jump to solution

Hello,

We have an endpoint (ENS), which needs assigning another policy from Threat Prevention category. As for the installation matter, I've done it successfully.

Next, how to enforce the policy in question to that endpoint at once? I know how to do it manually on the endpoint, but do not know how to conduct it on the McAfee ePo.

1 Solution

Accepted Solutions
Highlighted
McAfee Employee AdithyanT
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: How to enforce a new policy for an endpoint immediately?

Jump to solution

Hi @sanba06c,

Thank you for your post. To answer your question, we may discuss about the default Agent Server Communication Interval where the Agent contacts the Server once in 60 minutes (the default value) and uploads new events and looks for new policies. When it finds new policies, it downloads them and enforces them by default.

So what we can do here is enforce communication using a "wake up Agent" from ePO and have "Force complete Policy and Task update" and send the call to the endpoints as needed. This process is detailed in the below Documentation (the docs belong to 5.5, can e used on any versions from 5.5):

https://docs.mcafee.com/bundle/agent-5.5.0-product-guide-epolicy-orchestrator/page/GUID-ED4EB673-752...

Also, if you are interested, more information about ASCI and its configuration is given in FAQ document below:

https://kc.mcafee.com/corporate/index?page=content&id=KB75298

I sincerely hope you find them helpful!

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T

View solution in original post

1 Reply
Highlighted
McAfee Employee AdithyanT
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: How to enforce a new policy for an endpoint immediately?

Jump to solution

Hi @sanba06c,

Thank you for your post. To answer your question, we may discuss about the default Agent Server Communication Interval where the Agent contacts the Server once in 60 minutes (the default value) and uploads new events and looks for new policies. When it finds new policies, it downloads them and enforces them by default.

So what we can do here is enforce communication using a "wake up Agent" from ePO and have "Force complete Policy and Task update" and send the call to the endpoints as needed. This process is detailed in the below Documentation (the docs belong to 5.5, can e used on any versions from 5.5):

https://docs.mcafee.com/bundle/agent-5.5.0-product-guide-epolicy-orchestrator/page/GUID-ED4EB673-752...

Also, if you are interested, more information about ASCI and its configuration is given in FAQ document below:

https://kc.mcafee.com/corporate/index?page=content&id=KB75298

I sincerely hope you find them helpful!

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Thanks and regards,
Adithyan T

View solution in original post

Want to Ask a Question?

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community