epolicy question 1

[dasmit]

Hello,

I am new to using epolicy, and I have been searching NAI's site to find a easy question out.

When I schedule a new task, and I want to do a SDAT upgrade to my entire site, do I need a nap file for that? if so where do I download the NAP file? I understand how to push the software, but not the dats and such.


If someone could also give me a site to look at.

Thanks in advance,
Dave

 

[FatesWebb]

DAT files cannot be installed into the repository on the ePolicy Orchestrator server.

You cannot push updates using ePolicy Orchestrator (ePO). The update is performed by scheduling a task within the Task Scheduler of ePO. From there you will specify what type of task to run (scan, AutoUpdate, AutoUpgrade) on the client machines. This can be specified at the Group and machine level. After the task has been scheduled for a specified group, when the agent checks for a new policy it will pull this configuration and run the scheduled task accordingly.

Only ePO Agents can be ·pushed· by the ePO Server.

For the EXTRA.DAT, you can create an AutoUpdate task that points to a DAT package containing the EXTRA.DAT, and enforce this task on clients via ePO. However, because the enforcement of these task policies will not occur until the agents poll the ePO Server (60 minutes by default), this may not be the optimum response to a virus outbreak.

If you are using ePO 1.1 or greater, you can force the agent to call home by right-clicking on the preferred machine or group and selecting 'Agent Wake-Up Call'.


TO DEPLOY FROM MCAFEE FTP SITE!!

DAT files cannot be installed into the repository on the ePolicy Orchestrator (ePO) server.
Updating VirusScan 4.5.1 .DAT files from the Network Associates FTP site via ePolicy Orchestrator is done by creating a VirusScan 4.5.1 AutoUpdate task in the ePO console, letting the ePO Agents of ePO client machines pick up the tasks at their next Agent to Server Communication interval, the ePO agent invoking (starting) the ePO task at the scheduled time and the task manager component of VirusScan 4.5.1 trying to complete the DAT update using the FTP settings in the ePO task.

In detail, the procedure is as follows:

Select the appropriate level in the ePO directory (on the left-hand side of the ePO console) at which you want to create the ePO task
You can create the tasks at the Directory, Site, Group, or individual machine level, depending on how many machines you want the task to apply to. Tasks are automatically inherited by lower levels.

Create the ePO task type
Select the 'Tasks' tab on the right hand-side of ePO console.
Right-click in the 'Tasks' area and choose 'Schedule New Task'.
Select the "VirusScan v4.5.1 for Windows" task type, enter a name for your task in the 'New Task Name' field and click 'OK'.

Schedule the ePO task
ePO Tasks are NOT actively scheduled by default (the entry in the 'Enabled' column will be "False&quot so will never automatically take place unless the scheduling is enabled.
Double-click on the newly-created task which has appeared as a new line in the 'Tasks' tab on the right hand-side of ePO console.
Remove the check in the 'Inherit' checkbox so you can change the settings in this dialog.
Check the 'Enable (scheduled tasks runs at specified time)' box.
Click on the 'Schedule' tab.
Remove the check in the 'Inherit' box so you can change the settings in this dialog.
Choose the schedule setting you want in the "Schedule Task" drop-down box.
NOTE: "Run Immediately" does NOT mean that the task will take place on ePO clients as soon as you finish configuring the task
in the ePO console. This is because ePO agents will not know about the task you have created until they pick the task up at
their next Agent to Server Communication interval. "Run Immediately" means that ePO agents will try to invoke (start) the
task as soon they they pick up the task from the ePO server. Agent to Server Communication can be speeded up by doing an
Agent Wakeup Call.

Choose the other options you require such as "Enable randomisation", "Run missed task", "Advanced" button, etc.
Click 'OK' to save your schedule settings.
NOTE: The entry in the "Enabled" column for your tasks should now say "True".

Configure the AutoUpdate settings for the ePO task
Double-click on the newly-created task which has appeared as a new line in the 'Tasks' tab on the right hand-side of ePO console.
Click 'Settings...' button.
In the 'Update' tab, remove the check in the 'Inherit' box so you can change the settings in this dialog.
Click 'Edit' and ensure that "FTP site" is the option enabled in the 'Retrieve Files From' section and the path is correctly pointing to the Network Associates FTP site (the default).
Click on the 'Advanced' tab and select the other options you require.
Click on the 'Report Tab' to see the name of the file on the ePO clients that will contain information on how successful the DAT update task is.
Click 'OK' to save your settings.

Wait for the ePO agents on the ePO clients to pick up the task
ePO agents will not know about the task you have created until they pick the task up at their next Agent to Server Communication interval.
At the time scheduled in the the ePO task, the ePO agent will invoke the task and tell the task manager component of VirusScan 4.5.1 to try to complete the DAT update using the FTP settings in the ePO task.



TO DEPLY FROM A NETWORK SHARE

DAT files cannot be installed into the repository on the ePO server.
Updating VirusScan 4.5.1 .DAT files from a local network share via ePolicy Orchestrator is done by creating a VirusScan 4.5.1 AutoUpdate task in the ePO console, letting the ePO Agents of ePO client machines pick up the tasks at their next Agent to Server Communication interval, the ePO agent invoking (starting) the ePO task at the scheduled time and the task manager component of VirusScan 4.5.1 trying to complete the DAT update using the "Copy from a local network computer" settings in the ePO task.

In detail, the procedure is as follows:

Make sure you have a dedicated folder set up on a network machine that is accessible 24 hours a day containing the necessary files for a VirusScan 4.5.1 AutoUpdat
latest DAT .ZIP file
latest UPDATE.INI

If you want to minimize network traffic, also have the following files:
last few incremental .DAT files
latest DELTA.INI
NOTE: VirusScan 4.5.1 (unlike VirusScan 4.5 & NetShield 4.5) always looks for a suitable UPDATE.INI file when performing both AutoUpdate and AutoUpgrade

Make sure the dedicated folder is shared both in Windows Explorer and in the registry as a 'null session share'
This allows the task manager components of VirusScan 4.5.1 to access the files in the folder from across the network.
A dedicated folder is set up as &quot;\\<servername>\dats\virusscan451&quot;, where the &quot;dats&quot; folder is shared to the group 'Everyone' using Windows Explorer.
A null session share is also set up for the &quot;dats&quot; share.
The necessary files for the VirusScan 4.5.1 AutoUpdate are placed in the &quot;virusscan451&quot; folder and the ePO task is set up to go to &quot;\\<servername>\dats\virusscan451&quot;
NOTE: For instructions on creating a Null Session Share see 1.0.4413289.2463656: Creating a Null Session Share

Select the appropriate level in the ePO directory (on the left-hand side of the ePO console) at which you want to create the ePO task
You can create the tasks at the Directory, Site, Group, or individual machine level, depending on how many machines you want the task to apply to. Tasks are automatically inherited by lower levels.

Create the ePO task type
Select the 'Tasks' tab on the right hand-side of ePO console.
Right-click in the 'Tasks' tab area and choose 'Schedule New Task'
Select the &quot;VirusScan v4.5.1 for Windows&quot; task type, enter a name for your task in the 'New Task Name' field and click 'OK'.

Schedule the ePO task
ePO Tasks are NOT actively scheduled by default (the entry in the 'Enabled' column will be &quot;False&quot so will never automatically take place unless the scheduling is enabled.
Double-click on the newly-created task which has appeared as a new line in the 'Tasks' tab on the right hand-side of ePO console.
Remove the check in the '&quot;Inherit' box so you can change the settings in this dialog.
Check the 'Enable (scheduled tasks runs at specified time)' box.
Click on the 'Schedule' tab.
Remove the check in the 'Inherit box so you can change the settings in this dialog.
Choose the schedule setting you want in the 'Schedule Task' drop-down box.
NOTE: &quot;Run Immediately&quot; does NOT mean that the task will take place on ePO clients as soon as you finish configuring the task
in the ePO console. This is because ePO agents will not know about the task you have created until they pick the task up at
their next Agent to Server Communication interval. &quot;Run Immediately&quot; means that ePO agents will try to invoke (start) the
task as soon they they pick up the task from the ePO server. Agent to Server Communication can be speeded up by doing an
Agent Wakeup Call.

Choose the other options you require such as &quot;Enable randomisation&quot;, &quot;Run missed task&quot;, &quot;Advanced&quot; button, etc.
Click 'OK' to save your schedule settings.
NOTE: The entry in the &quot;Enabled&quot; column for your tasks should now say &quot;True&quot;.

Configure the AutoUpdate settings for the ePO task
Double-click on the newly-created task which has appeared as a new line in the 'Tasks' tab on the right hand-side of ePO console.
Click the 'Settings...' button.
In the 'Update' tab, remove the check in the 'Inherit' box so you can change the settings in this dialog.
Click 'Edit' and ensure that &quot;UNC path&quot; is the option enabled in the 'Retrieve Files From' section and the path is correctly pointing to the dedicated folder containing the necessary files for the VirusScan 4.5.1 AutoUpdate.
Click on the 'Advanced' tab and select the other options you require.
Click on the 'Report' tab to see the name of the file on the ePO clients that will contain information on how successful the .DAT update task is.
Click 'OK' to save your settings.

Wait for the ePO agents on the ePO clients to pick up the task
ePO agents will not know about the task you have created until they pick the task up at their next Agent to Server Communication interval.
At the time scheduled in the the ePO task, the ePO agent will invoke the task and tell the task manager component of VirusScan 4.5.1 to try to complete the .DAT update using the local share settings in the ePO task.

 

[Netwolve]

what is the purpose of the delta.ini file for performing mcafee virus scan updates?

 

[FatesWebb]

delta coordinates the incrementa dats, (upd files)
this allows you to only download what you need saving bandwith js error; 67 on line; 36 of signature.class