McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Product Manual

Page: 8 / 328

Checking in packages manually . . . . . . . . . . . . . . . . . . . . . . . . . . . 207
Deleting DAT or engine packages from the master repository . . . . . . . . . . . . . . . 208
Manually moving DAT and engine packages between branches . . . . . . . . . . . . . . . 208
Checking in engine, DAT and ExtraDAT update packages manually . . . . . . . . . . . . . 209
18 Responding to events in your network 211
About using Automatic Responses . . . . . . . . . . . . . . . . . . . . . . . . . . 212
Automatic Responses and how it works . . . . . . . . . . . . . . . . . . . . . . . . 212
Throttling, aggregation, and grouping . . . . . . . . . . . . . . . . . . . . . . 213
Default rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 213
Planning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 214
Determining how events are forwarded . . . . . . . . . . . . . . . . . . . . . . . . 214
Determining which events are forwarded immediately . . . . . . . . . . . . . . . 215
Determining which events are forwarded . . . . . . . . . . . . . . . . . . . . . 215
Configuring Automatic Responses . . . . . . . . . . . . . . . . . . . . . . . . . . . 216
Assigning permission sets to access Automatic Responses . . . . . . . . . . . . . . 216
Working with SNMP servers . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Working with registered executables and external commands . . . . . . . . . . . . 220
Creating and editing Automatic Response rules . . . . . . . . . . . . . . . . . . . . . 222
Describing the rule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 222
Setting filters for the rule . . . . . . . . . . . . . . . . . . . . . . . . . . . 223
Setting thresholds of the rule . . . . . . . . . . . . . . . . . . . . . . . . . 223
Configuring the action for Automatic Response rules . . . . . . . . . . . . . . . . 224
Frequently asked questions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226
Monitoring and reporting on your network security status
19 Monitoring with Dashboards 229
Working with dashboards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
Creating dashboards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 230
Adding monitors to dashboards . . . . . . . . . . . . . . . . . . . . . . . . 230
Removing monitors from dashboards . . . . . . . . . . . . . . . . . . . . . . 231
Duplicating dashboards . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
Deleting dashboards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
Importing dashboards . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
Exporting dashboards . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
Changing the system default dashboard . . . . . . . . . . . . . . . . . . . . . 233
Assigning permissions to dashboards . . . . . . . . . . . . . . . . . . . . . . 233
Working with dashboard monitors . . . . . . . . . . . . . . . . . . . . . . . . . . 234
Configuring dashboard monitors . . . . . . . . . . . . . . . . . . . . . . . . 234
Moving and resizing dashboard monitors . . . . . . . . . . . . . . . . . . . . . 235
Default dashboards and their monitors . . . . . . . . . . . . . . . . . . . . . . . . 235
20 Querying the database and reporting on system status 239
Query and report permissions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240
About queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240
Query Builder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 242
Working with queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Creating custom queries . . . . . . . . . . . . . . . . . . . . . . . . . . . 243
Running an existing query . . . . . . . . . . . . . . . . . . . . . . . . . . 244
Running a query on a schedule . . . . . . . . . . . . . . . . . . . . . . . . . 245
Creating a query group . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Moving a query to a different group . . . . . . . . . . . . . . . . . . . . . . . 246
Duplicating queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246
Deleting queries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 246
Exporting a query . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Contents
8 McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide