Hi all, Been banging my head against a wall recently and McAfee/Trellix support has been lacking as unfortunately it always has We licensed our ePO server for MVision a couple of years ago and it's taken me far too long to get onto this but I started our plans and did our initial account linking and migrations back in June. I had a whole heap of pain as I needed to migrate everything from VSE and SiteAdvisor across to ENS (yes I know, should have done that years ago too!) but that was done, policies all went up and then I had to wait for remaining machines to come back to us and get the releva ..read more

I was just checking my Mcafee security logs and see it blocked a risky connection.  the IP address is 192.168.5.150 which is a private IP address, but its not within my IP subnet.  anyone seen that before?  I tried to check my network, and don't see that IP address ..read more

Hi Guys , I'm a complete noob when it comes to Mcafee Epo, I did take over from our previous admin but there was no hand over , anyway how to I look at current distribution points and how do I setup a new distribution point. Regards ..read more

Hello, We run a Windows Server 2019 domain that I am trying to add a few Ubuntu machines, this looks to work and I can log onto the Linux machines with domain credentials. Next is to install McAfee EPO agent and ENS. I have installed the Agent (5.6.6.232) but copying across the installation file - that worked and the machine has appeared in EPO, I have then deployed the ENS Security Threat Prevention (10.7.10.62) and EPO confirms this is installed. I have a task installed that should update AMCore Content but this is not updating - have I missed something? If I try and check the status with: s ..read more

Currently, 6 alerts are configured and they are active. However they are not being shown in real time. Tests carried out so far: synchronization of alarms, the reports, if received by mail, were disabled and reactivated. What could be causing this display problem ..read more

 i want to ask about MacAfee epos  best practice for service accounts minimum privilege's "hardening" for deployment and operation Local administration Log on locally Log on remote desktop Log on through Network Log on as a batch job Log on as a service i want to what to allow and what to deny from the above list for both SQL service account and McAfee deploy account to function properly and with lest privilege's required. if any one has best practice just tell me  Thanks in advance  ..read more

Good morning, So I have ran into this issue twice now and I am wondering if anybody else has a solid work around. So, part of installing McAfee EPO is having SQL installed. The two communicate over port 1434. However, regardless of what rules I build, I cannot get McAfee to communicate over UDP 1434 without disabling firewalls through GPO, disabling firewalls locally, AND disabling the firewall service on the local machine. Its really overkill. Again, setting TCP/UDP rules allowing all traffic over 1434 has not worked. The McAfee KB on the subject, is good, but doesn't mention this at all. Any ..read more

i want simple tutorial about Mcafee ePO . especially for DLP/RDP components how to configure them and know how each components work. If there is simple videos tutorial, it will be good thanks in advance  ..read more

I am at a loss for how and when a Windows client that is managed through Mcafee ePo updates it's solid core status. I have a Query as a Dashboard item called Solidcore Agent Status Report. I can see a pie chart with how many clients I have that have Solidcore enabled and how many are in update mode. I put the suspect workstations in enabled mode from update mode, but it takes a long time for the system to reflect in ePO that it's now in Enabled mode. The workstations are NOT connected to the domain 100% of the time, they only connect for about 15-30 minutes at a time to receive manually push u ..read more

Hi  i have  McAfee Endpoint ePolicy Orchestrator and i want to exclude usb drive  i try by vendor ID adn Product ID but nothing  how i exclude it ..read more