[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

McAfee ePO SuperAgents & Clients

Posted on 2012-08-23
8
Medium Priority
?
968 Views
Last Modified: 2013-12-09
Hello,

I have 5 super agents deployed out across my organization of 15 branches, with the intention of adding more as time permits.

When I set these up almost 6 months ago, they behaved as expected - clients from the branches would reach out to these SAs and get their DAT updates.

Recently, I can't say when, we've been noticing a lot of weird conversations between clients from a branch and an SA from another. Looking into these, we noticed that the clients from one branch were actually going out to another branch to get those updates. There's the agent communications on port 8081 chewing up a lot and port 84 (don't know what that is) also contributing to the traffic.

I would like to fix this issue in a way that I can effieciently utilize the bandwidth between the branches and still be up to date on the signature files.

How would I go about doing this?

Thank you.
0
Comment
Question by:netcmh
  • 6
8 Comments
 
LVL 21

Accepted Solution

by:
netcmh earned 0 total points
ID: 38329150
Anyone?
0
 
LVL 21

Assisted Solution

by:netcmh
netcmh earned 0 total points
ID: 38330938
Anyone?
0
 
LVL 21

Assisted Solution

by:netcmh
netcmh earned 0 total points
ID: 38338245
Please help!
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
LVL 2

Expert Comment

by:xG5
ID: 38352755
Is there descrepency between the super agents?  I've seen this happen when one of my super agents stopped pulling updates from it's Agent Handler.
0
 
LVL 21

Author Comment

by:netcmh
ID: 38353989
What sort of discrepancy?

The SAs are defined per subnet. I don't see why they would reach across a subnet to get to another SA. I checked that the local SA is available.

What are those ports?
0
 
LVL 1

Expert Comment

by:garycantwell
ID: 38413505
what repositories are listed in the clients sitelist? Are they only allowed to connect to the local SA and nothing else?
0
 
LVL 21

Author Comment

by:netcmh
ID: 38422715
The local repo and the HO repo in a spotty fashion. Some have it, some don't.
0
 
LVL 21

Author Closing Comment

by:netcmh
ID: 38998445
Not very helpful comments, sorry. I'm going to have to close this.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PREFACE The purpose of this guide is to explain what the SEPC Status Utility is and how it works. I have written the utility using AutoIt and have included the source code for your review. You are welcome to modify the code to your liking, but I wi…
HOW TO REMOTELY CLEAN MEROND.O WITH ESET SILENTLY PROBLEM       If you have the fortunate luck to contract the Merond.O virus on your network, it can be quite troublesome to remove as it propagates to network shares on your network. In my case, the …
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question