Problems - 1. Clients will not be available at that point of time.
2. Windows firewall may be on due to which deployment task fails.
-> For example, I had to implement TOPS Advanced in one of our client environment with the following products McAfee Agent, AV 8.7i, ASW 8.7i, HIPS, NAC Client and Site Advisor.
-> Since I was not well versed with HIPS, NAC and Site Advisor what I did was deployed McAfee Agent, AV 8.7i, ASW 8.7i on 1000 machines in the first stage, then HIPS in second stage and now it's time for NAC and SAE.
We use a GPO to install McAfee Agent 4.0p3, from there the rest of the deployments should work fine regardless of whether the firewall is on or the machine is active (configure the deployment task to "Run Immediately" and it will get the task the next time the computer connects -- moreover, systems that already have the software will ignore the instructions unless there's a change that requires them to update).
If anyone is interested, I attached our internal documentation for creating a GPO to deploy McAfee Agent -- there are some links to internal URLs there, you'll have to grab Orca.msi and uniextract from the provider rather than our internal links. Everything else should work as advertised. This information was fed up to McAfee through our SAM about a year ago, but I haven't seen anything back with regard to actually supporting GPO deployment of McAfee Agents...
Once the agent is installed, everything else can be deployed using client tasks, regardless of firewall settings (windows share access isn't necessary). Software configured to install via client tasks is deployed based on connections initiated by the client on tcp/80 (http) or tcp/443 (https), so it looks like normal web traffic. The key is to get the agent on the system -- everything after that can be done from ePO without special firewall configuration settings on the client.
Thanks Keith for your valauable reply.
Please do suggest some more valuable insights if any.
I'm not able to sign up on that site.Message was edited by: dishant on 3/2/10 10:29:05 PM CST
Ah, as I said inititally (less clearly), you'll have to google for those packages and download them from the original source. The netfiles stuff is a local storage place we use at UIUC.