Solved

Setting exclusions in McAfee

Posted on 2009-07-01
3
786 Views
Last Modified: 2013-12-09
Hi All

We are running McAfee 8.5i clients and EPO 4.0. Let's say the default on-access scan policy is to scan everything.

I have a server that needs exclusions set. I guess I can either:

i) create a container in the EPO console, apply a policy that has these exclusions, then move the server to the container
ii) set the exclusions on the server

Is one method preferred over the other?

Cheers
Dilan
0
Comment
Question by:kam_uk
  • 2
3 Comments
 
LVL 16

Accepted Solution

by:
legalsrl earned 500 total points
ID: 24761012
Morning Dilan

If it's just one machine, then I would create a new policy with the exclusions and then assign that policy to the single machine.  You can do this from within the machine details page from within Systems

If it's more than one machine, I would create the container and assign the policy to the container

If you only set the exclusions on the server, then each time the McAfee agent enforces the policies, then you will need to reset them

Does that make sense ?

Cheers
Si
0
 
LVL 3

Author Comment

by:kam_uk
ID: 24761418
Hello

"If you only set the exclusions on the server, then each time the McAfee agent enforces the policies, then you will need to reset them"

How often does the McAfee agent 'enforce' the policies? I'm not sure  by what you mean by enforcing them?

Thanks for the advise!
0
 
LVL 16

Expert Comment

by:legalsrl
ID: 24761432
No worries :-)

The ePO Agent normally enforces policies every 5 minutes, so if you set a manual exclusion on the client, ePO will override it with it's policy settings every 5 mins

Cheers
Si
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

There are many HijackThis tutorials on the web already, so this article is about tips that help utilize HijackThis' full potential as a diagnostic tool. Download HijackThis from a TrendMicro link or from known reliable sources only. http://free.…
So you got the Conficker. You could go to each machine and run the eye chart test (http://www.confickerworkinggroup.org/infection_test/cfeyechart.html), but in a bigger environment, or if you prefer to work smarter and not harder, you need some …
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now