3 Replies Latest reply on May 19, 2010 11:44 AM by RSKadish

    Creating Automatic Responses for MVT in ePO

      Hi all,

       

      The instructions in the McAfee Virtual Technician documentation which deal with creating Automatic Responses in ePO are a little confusing.  They say to set the "Detecting Product" filter to ePO-MVT, but that filter isn't an option in version 4.5.  I'm also unsure if this should be a client or a server rule.

       

      If anyone has set one of these responses up and can share their configuration, I'd appreciate it!

       

      Thanks,

      - Steve

        • 1. Re: Creating Automatic Responses for MVT in ePO

          Steve,

           

          First, thank you for you interest in ePO-MVT.  Please do not hesitate in letting what you think about it as well as any possible recommendation.

           

          Regarding you question about setting up the automatic notification for ePO-MVT,  we are clarifying the steps and will contact you shortly.  We will also update the documentation accordingly.

           

          Regards

          • 2. Re: Creating Automatic Responses for MVT in ePO

            Steve,

             

            ePO-MVT Automatic response only works with "Threat" Event types. Hence, when selecting Server or Client event types, may cause some confusion.

             

            We will be updating the documentation to reflect the following change:  "4.  Select the Event group as ePO Notification events and the Event type "Threat" that trigger this response."

             

            Moreover, when Event type is "Threat", on the Filter page "SUPPMVT1000" will be listed under "Detecting Product" for ePO-MVT.  However, before SUPPMVT1000 can be seen in the detecting product list, events must be sent first from the nodes back to the ePO server. Only then, EPO will detect the products and will appear in the detecting products list.  We will also update the documentation to reflect this change.

             

            Regards

            • 3. Re: Creating Automatic Responses for MVT in ePO

              Hi Francois,

               

              Thanks very much for the help!

               

              Best,

              - Steve