cancel
Showing results for 
Search instead for 
Did you mean: 
hippy
Level 7
Report Inappropriate Content
Message 1 of 7

McAfee Agent

Jump to solution

Hello,

Does the Agent need both the IP address and the server name to report back to the ePO server. Specifically is it possible to omit the IP address and just use the server name?

TIA

Hippy

1 Solution

Accepted Solutions
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 6 of 7

Re: McAfee Agent

Jump to solution

Ah - that's kind of the reverse of what you said earlier

Again, I'd strongly recommend against this. The sitelist contains more than just the location of the server - in particular it contains the server's SSL certificates for the clients to use, so if you change the sitelist to point to a different server the certs won't match and the agents won't be able to communicate.

Additionally the framepkg contains the server's keys, so if you change the sitelist to point to different server, the agent won't be able to communicate either (unless you import into each ePO server the keys from every other server.)

You're going to have to have a sitelist per server anyway, so you might as well stick with a framepkg per server.

HTH -

Joe

6 Replies
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 2 of 7

Re: McAfee Agent

Jump to solution

Strictly speaking the agent only needs the IP address: it just depends on where it gets the IP address from

The agent will first attempt to connect directly to the IP address specified in the sitelist. If this fails, it will then do a DNS lookup on the FQDN, and attempt to connect to the IP address returned by this. If this fails it will try and resolve just the netbios name of the machine and connect to that.

HTH -

Joe

Highlighted
hippy
Level 7
Report Inappropriate Content
Message 3 of 7

Re: McAfee Agent

Jump to solution

Very useful. Thanks Joe. So just to following on, if packaging up the MA for deployment by an automated method would it be acceptable just to have the IP address in the Sitelist? Assuming the IP address isn't going to change.

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 4 of 7

Re: McAfee Agent

Jump to solution

Can I ask what it is you're trying to achieve? There shouldn't be any need to edit the sitelist (and we very strongly recommend against it.) If you were to do this, all you would be doing is crippling the agent...

Thanks-

Joe

hippy
Level 7
Report Inappropriate Content
Message 5 of 7

Re: McAfee Agent

Jump to solution

Ideally I would like to be able to take out the IPaddress and just leave an alias host name so after packageing the MA it can be deployed in different ePO environments. If that makes sense?

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 6 of 7

Re: McAfee Agent

Jump to solution

Ah - that's kind of the reverse of what you said earlier

Again, I'd strongly recommend against this. The sitelist contains more than just the location of the server - in particular it contains the server's SSL certificates for the clients to use, so if you change the sitelist to point to a different server the certs won't match and the agents won't be able to communicate.

Additionally the framepkg contains the server's keys, so if you change the sitelist to point to different server, the agent won't be able to communicate either (unless you import into each ePO server the keys from every other server.)

You're going to have to have a sitelist per server anyway, so you might as well stick with a framepkg per server.

HTH -

Joe

hippy
Level 7
Report Inappropriate Content
Message 7 of 7

Re: McAfee Agent

Jump to solution

Thanks Joe. Makes sense.

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community