Trellix ePO 5.10: ePolicy Orchestrator 5.10 Administration

Kursinhalte

Dieser Kurs ist ausgelegt, um IT-Professionals die Kenntnisse und Fähigkeiten zu vermitteln, ePolicy Orchestrator 5.10 im Netzwerk zu implementieren und zu konfigurieren, sowie Clients und Server effektiv zu verwalten. Vermittlung rudimentärer Kenntnisse für Clientlösungen wie ENS 10, sowie Basiskenntnisse für DXL und TIE Erweiterungen. 

Aufbauend auf diesem Kurs, werden das viertägige ENS Training und das viertägige ePO Aufbau Training empfohlen.

Welcome:
Become familiar with ePO information and support resources and feedback mechanisms.

Security Solutions and McAfee ePolicy Orchestrator Overview:
Describe the security connected model, McAfee ePO software features and functionality, and solution components and architecture.

Planning a McAfee ePolicy Orchestrator Deployment:
Identify deployment considerations, describe deployment scenarios and solutions, identify McAfee ePO platform requirements, and discuss database sizing considerations.

Installing McAfee ePolicy Orchestrator Software:
Identify installation requirements, recommendations, and best practices; distinguish between a new installation and a recovery installation; identify and distinguish between the different deployment options for a new installation; install McAfee ePO software; perform post-installation tasks; and identify configuration tools for the initial setup of the McAfee ePO software environment.

Managing Permission Sets and Users:
Configure settings for personal settings, users, and permission sets, create a custom permission set, create users and assign permission sets, verify rights and access granted with permission sets, configure McAfee ePO software and Microsoft Active Directory user accounts, and configure user autocreation.

Creating and Populating the System Tree:
Provide an overview of the McAfee ePO software system tree, use different methods for creating the system tree, describe the various methods of organizing the system tree, and create permission sets to let user accounts manage the system tree.

Using the Tag Catalog:
Learn the difference between tags without criteria (applied manually) and criteria-based tags (applied automatically and on demand), how to create new tags, how to edit, delete and move tags between tag groups, and how to enable permissions for other administrative users.

Sorting the System Tree:
Learn how to dynamically sort your machines into your McAfee ePO system tree using a combination of system criteria, how to dynamically move machines into their appropriate group in your system tree, and how to verify IP integrity to ensure IP address sorting criteria does not overlap between different groups.

McAfee Agent:
Define the McAfee Agent, explain its purpose and key characteristics and functions, and navigate the McAfee Agent interface.

System Information:
View and interpret detailed information about your managed elements, customize your view, and view and customize System Monitors.

Client Tasks:
Describe the purpose of client tasks; communicate about client task concepts; access and navigate the Client Task Catalog; identify client task types; and add, duplicate, edit, schedule, and delete a client task.

Managing Policies:
Describe the purpose of policies, create and edit policy objects, manage policy configuration and assignment, see policy inheritance in action, and enforce policy changes on client machines (endpoints).

Policy and Client Task Approval:
Learn how to set up the approval process and how it works in McAfee ePO software.

Deploying Software for Managed Systems:
Identify different methods used to acquire required software components, explain how the Software Catalog works, install extensions and software components manually, check in required software components manually, distinguish between a Product Deployment Project and Client Task, and create a Product Deployment Project.

Repositories:
Describe repository types and contents; explain the available branches for repositories; view the default repositories; create a source, fallback, distributed, SuperAgent, and unmanaged repository; modify the repository contents; and export the site list.

Product and Server Maintenance with Repositories:
Update McAfee ePO software-managed systems with scheduled or manual client tasks, configure the Global Updating feature to automatically update McAfee ePO-managed systems, manage McAfee ePO software repositories with server pull and replication tasks, and describe ways to troubleshoot client update task failures.

Managing Dashboards and Monitors:
Identify the purpose of dashboards and monitors, as well as features and capabilities, identify default dashboards included with McAfee ePO software, access the Dashboards page, duplicate a dashboard, add a dashboard, and edit and assign dashboard permissions.

Working with Queries and Reports:
Query the McAfee ePO database, use the Query Builder to create your own queries, explain how Multi-Server Roll-Up Reporting is performed, configure query permissions, configure Multi-Server Roll-Up Query Permissions, and export query data for viewing outside of McAfee ePO software.

Automatic Responses and Notifications:
Use Automatic Response rules to create alerts and perform pre-determined actions, configure Automatic Responses, list the Permission Sets for Automatic Responses, and describe how to configure contacts for notifications.

Database Maintenance and Server Utilities:
Identify maintenance tasks that should be performed on a regular basis, identify the primary SQL Server and McAfee ePO software tools you can use for maintenance, identify the recommended database recovery model, explain how to back up and purge data, identify ways to automate maintenance, and identify general server tasks.

Disaster Recovery:
Describe the Disaster Recovery feature and how it works, use a Server Task for a Snapshot, take a Snapshot from the Dashboard, provide examples of Disaster Recovery scenarios, explain the differences between a McAfee ePO software initial installation and a recovery installation, and describe best practices for Disaster Recovery.

Agent Handlers:
Explain Agent Handler functionality and benefits, describe Agent Handler deployment scenarios and plan Agent Handler deployment, install and configure Agent Handlers, assign McAfee Agents to Agent Handlers and manage assignments, and create and manage Agent Handler groups.

Rogue System Detection:
Explain the purpose of Rogue System Detection and how it works, determine the best place to install sensors on your network, examine sensor detection results and statistics, create policies for Rogue System Detection, install sensors onto machines in your network, and remove sensors from machines in your network, and view available Rogue System Detection queries.

Configuring Rogue System Detection:
Configure Rogue System Sensor settings, permission sets and Automatic Responses for Rogue System Detection, monitor detected systems, and view available Rogue System Detection queries.