What is Registered executables in McAfee ePO?

The registered executables you configure are run when the conditions of a rule are met. Automatic Responses trigger the registered executable commands to run. Note: You can run registered executable commands only on console applications.

How do I troubleshoot McAfee agent?

Troubleshoot access to the agent log: In the McAfee Agent General policy, deselect the option Accept connections only from the ePO server . Make sure that the McAfee Agent wake-up communication port is accessible (default port is 8081). You can use Telnet to confirm that the port is accessible.

Where in the ePO console would an administrator go to view the threat event log?

For threat type events (Malware detected, Access Protection rule triggered), you see the event show up in the Threat Event Log . It appears under the Reporting menu in the ePO console.

Which ePO process writes to the Server_ log?

The Application Server service, or Tomcat, is responsible for displaying the ePO console GUI. The Event Parser service takes events uploaded from clients in the environment and parses them into the SQL database. The Server service, or Apache, processes and receives all agent-server communication in the environment.

How do I cancel my ePO agent manually?

Remove the agent from Windows command line

Open a command prompt on the target system.
Run the agent installation program, FrmInst.exe, from the command line with the /REMOVE=AGENT option. Note: To remove McAfee Agent forcibly from the Windows client system, run the command FrmInst.exe /FORCEUNINSTALL .

Where in the ePO console could you go to share a client task with another ePO server?

BIOS Hash

Log on to the console of ePO A.
Click Menu, Configuration, Registered Server.
Click New server.
Add information for ePO B.
Click Enable for the Policy sharing entry. This action enables the sharing of product policies across servers.
Click Save.

Which server task takes user information from LDAP and makes a copy of it in the ePO DB?

Explanation of database mirroring: When the LDAP sync task runs, it pulls information from registered LDAP servers and stores it in the ePO database. The LDAP sync task populates the tables in the ePO database that begin with the name “OrionLdap”.

How do I restart my ePO server?

Restart the ePolicy Orchestrator Application Server service:

Press Windows+R, type services. msc , and click OK.
Right-click the following services and select Restart: McAfee ePolicy Orchestrator x.x.x Application Server. McAfee ePolicy Orchestrator x.x.x Server. McAfee ePolicy Orchestrator x.x.x Event Parser.

Who has access to private queries?

Although public queries can be viewed by anyone having access to Query Viewer or Query Manager but private queries can only be seen by the user who created them.

How do I download an ePO package?

Task

Click Menu | Systems | System Tree, click System Tree Actions, then select New Systems from the drop-down menu.
Select Create and download agent installation package.
Select the Agent version for Windows.
Deselect Embed Credentials in Package.
Click OK.
Select FramePkg.exe and save it to the temporary folder.