McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC, Руководство по эксплуатации продукта

Страница: 216 / 328

Configuring Automatic Responses
Use these tasks to configure the necessary resources to fully leverage Automatic Responses.
Tasks
• Assigning permission sets to access Automatic Responses on page 216
Use these tasks to assign the appropriate permission sets to access the Automatic
Responses feature.
• Working with SNMP servers on page 217
Use these tasks to configure Responses to use your SNMP server. You can configure
Responses to send SNMP (Simple Network Management Protocol) traps to your SNMP
server, which allows you to receive SNMP traps at the same location where you can use
your network management application to view detailed information about the systems in
your environment.
• Working with registered executables and external commands on page 220
Use these tasks when working with registered executables and external commands. You
can configure automatic response rules to run an external command when the rule is
initiated.
Assigning permission sets to access Automatic Responses
Use these tasks to assign the appropriate permission sets to access the Automatic Responses feature.
There are two permission sets specific to the Automatic Responses feature:
• Automatic Responses
• Event Notifications
Users accessing this feature require additional permissions, depending on the specific component
used. For example, to create an automatic response that triggers a predefined server task, users need
full rights to the
Server tasks
permission sets. Additional permission sets that might be required include:
• Client Events • Registered servers
• Contacts • Rogue System Detection
• Event Notifications • System Tree (view only)
• Issue Management • System Tree access
• Queries • Threat Event log
Tasks
• Assigning permissions to Notifications on page 216
Use this task to ensure that all desired administrators and users have the appropriate
permissions to Notifications. The permissions to Notification enables McAfee ePO users to
add registered executables.
• Assigning permissions to Automatic Responses on page 217
Use this task to ensure that all desired administrators and users have the appropriate
permissions to Responses. The permissions to Responses enables McAfee ePO users to
create response rules for different event types and groups.
Assigning permissions to Notifications
Use this task to ensure that all desired administrators and users have the appropriate permissions to
Notifications. The permissions to Notification enables McAfee ePO users to add registered executables.
For option definitions click
?
in the interface.
18 Responding to events in your network
Configuring Automatic Responses
216 McAfee
®
ePolicy Orchestrator
®
4.6.0 Software Product Guide