4 Replies Latest reply on Jan 19, 2015 12:19 PM by avilt

    ePO VSE Controlling Update

    avilt

      There are three branches in EPO Master Repository,

      1 Current

      2 Previous

      3 Evaluation

       

      My requirement is, first I need to evaluate the systems with latest updates, so I point the test systems to Evaluation branch for patch updates.

       

      All other production systems are pointed to Current branch. How can I control the patch update on this Current branch.

       

      Let's say McAfee is releasing patches on Sunday, by default the Evaluation group will be updated instantly from the Internet. I need to observe the results on test systems for one day, then on Monday evening I would like to approve the Sunday's patches to Current branch.

       

      How can I achieve this?

        • 1. Re: ePO VSE Controlling Update
          Tristan

          Just to confirm...when you say patch updates do you mean virus definitions (DATs) or actual patches?

           

          Either way it all depends on how you've configured your 'Update Master Repository' scheduled server task. Simple have one task to update the evaluation branch and disable any update task for the current branch.

           

          If done correctly then the Current branch will remain unchanged allowing you to update it as and when you wish.

           

          I can't remember if it's a setting somewhere but i've never had ePO update patches or software automatically. I've always been able to manage everything manually either using the software manager or downloading files directly from the McAfee website with a grant number.

          • 2. Re: ePO VSE Controlling Update
            avilt

            How do I manually approve the dat version to CURRENT branch? Is it based on DAT number?

            • 3. Re: ePO VSE Controlling Update
              Tristan

              The problem is by the time you evaluated the DAT in evaluation the DAT in McAfees repositories will have advanced. I don't believe you can update incremental DATs to a particular level (you can only check in SuperDATs). So an update repository task will potentially update to newer DATs.

               

              An easy way to do it would be to change the branch selection in the agent policy assigned to the non test machines.Capture.JPG

              • 4. Re: ePO VSE Controlling Update
                avilt

                Can we create multiple custom branches for DAT updates?