• They specify which ports to check for a McAfee Agent.
Task
For option definitions, click ? on the page displaying the options.
1
Go to Configuration | Server Settings, then in the Settings Categories list click
Rogue System Matching.
2
Click Edit.
3
Use the Matching Detected Systems table to define the properties that determine when
to match or merge detected systems.
4
Use the Matching Managed Systems table to define the properties that determine when
a newly detected interface belongs to an existing detected system.
5
In Static IP Ranges for Matching, type the static IP ranges to use when matching on
static IP addresses.
6
In Alternative McAfee Agent Ports, specify any alternate ports you want to use when
querying detected systems to check for a McAfee Agent.
7
Click Save.
Editing sensor settings
Use this task to edit the sensor settings for Rogue System Detection. Sensor settings are
user-configured and specify:
• The amount of time sensors are active.
• The maximum number of sensors active in each subnet.
• How long the server waits to hear from a sensor before categorizing it as missing.
Task
For option definitions, click ? on the page displaying the options.
1
Go to Configuration | Server Settings, then in the Settings Categories list click
Rogue System Sensor.
2
Click Edit.
3
Edit the Sensor Timeout minutes field to set the maximum number of minutes the server
waits for a sensor to call in before marking it as missing.
4
Edit the Sensors per Subnet field to set the maximum number of sensors active in each
subnet.
5
Edit the Active Period minutes field to set the maximum amount of time that passes
before the server tells a sensor to sleep, to allow a new sensor to become active.
6
Click Save.
Detecting Rogue Systems
Configuring server settings for Rogue System Detection
McAfee ePolicy Orchestrator 4.0.2 Product Guide
200
