Overview/Installation Flashcards
What is ENS?
An integrated, extensible security solution that protects servers, computer systems, laptops, and tablets against known and unknown threats.
What are some of the types of threats that ENS can provide protection from?
Malware, suspicious communications, unsafe websites, and downloaded files.
Why is ENS unique?
It is made up of multiple security modules that communicate in real time to analyze and protect against threats
What are the security modules that comprise ENS?
Threat Prevention
Firewall
Web Control
Adaptive Threat Protection
Give a brief overview of Threat Prevention
Prevents threats from accessing systems, scans files automatically when they are accessed, and runs targeted scans for malware on client systems
Give a brief overview of Firewall
Monitors communication between the computer and resources on the network and the Internet. Intercepts suspicious communications
Give a brief overview of Web Control
Monitors web searching and browsing activity on client systems and blocks websites and downloads based on safety rating and content
Give a brief overview of Adaptive Threat Protection
Analyzes content from your enterprise and decides how to respond based on file reputation, rules, and reputation thresholds. Adaptive Threat Protection is an optional Endpoint Security module
What is the role of the common module?
Provides settings for common features, such as interface security and logging. It is installed automatically if any other module is installed
What is the workflow for a First Time Installation?
- Install software server side by checking in the desired product package file to the ePO server
- Update ePO server with the latest content files required for Endpoint Security: AMCore, Exploit Prevention, and ATP content Files
- Deploy the client software with default or custom settings to managed systems either:
a. Remotely with deployment tasks
b. Locally on managed systems with an installation URL - Verify that the client software is installed and up to date on all managed systems
- Configure settings as needed
What is the workflow for an upgrade?
- Confirm that your upgrade path is supported
- Check in the product package files and the McAfee Agent package files (if required) to the ePO server
- Upgrade McAfee Agent, if required
- Manually update your ePO server with the latest content files required for Endpoint Security: Amcore, Exploit Prevention, and ATP content files
- Deploy the client software with default or custom settings to managed systems in one of these ways:
a. Remotely with deployment tasks
b. Locally on managed systems with an installation URL - Verify that the client software is installed and up to date on all managed systems
- Configure settings as needed
What additional steps need to be taken when upgrading legacy software with migrated settings?
- Review and prepare legacy settings
- Migrate settings with Endpoint Migration Assistant
- Verify that your settings migrated correctly
What does Endpoint Upgrade Assistant do?
Upgrade all the systems that meet requirements with a single deployment task, and to plan deployments that ensure compatibility between Endpoint Security and other McAfee products running on managed systems
Before deploying ENS to your production environment, what should be done first?
You need to deploy the software you plan to install in a test environment or to a test group, then verify the results before deploying it to the larger environment. Testing lets you verify that endpoints upgrade as expected, and make changes as needed, before deploying upgrades to all endpoints
What consideration needs to be made prior to deploying ATP?
If you plan to install Endpoint Security ATP, decide whether to integrate it with the optional TIE server