McAfee Common Management Agent and Anti Virus

[matanzas]

I have inherited a Dell machine (Win XPP) and on it is McAfee Common Management Agent (icon in Sys Tray).

There is noting on the start menu | all programs that refers to anything McAfee and I haven't really been able to find out anything difinitive about it online. The only thing I can find is in Add/Remove Programs screen.

Does this mean that I have Anti Virus Protection on this machine via McAfee?

Thanks in advance

 

[paulhthomas]

No, all this means is that Common Management agent was probably installed by an ePO server to manage it's policies when it was on a network a some point. If there's nothing in the Add/remore programs for VirusScan then unfortunately there's nothing on there.
you could always check

c:\program files\network associates\virusScan

just to be sure.

Paul

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

Thanks Paul.

It was in a retail environment where there are several machines running XPP and others running a DOS based retail POS system off a server. The XP machines are connected to the server as well and are able to access the retai program. I looked at the machines and there is no refence to anti virus anywhere so I suspect they are living dangerously. I ended up with the machine as it was surplus.

I don't know much about server environments. What purpose does the McAfee program serve re "managing policies"?

Thanks

 

[paulhthomas]

with the ePO program you can use it to distribute the latest anti virus definitions, push out patches, push the anti virus install itself, remove norton, run reports, as well as configuring the anti virus program. By this i mean, centrally configure up to 250k clients so they all have the same settings etc.

it's a pretty awesome tool!

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

so it can be used to roll out just about anything including another AV program?

 

[matanzas]

I might be somewhat biased but I have never had a warm experience with McAfee

 

[paulhthomas]

um, not sure if you can roll out symantec (although I've never tried), but I know you can remove it and configure it using ePO.
I'm the opposite. I HATE symantec products with a passion!

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

I was actually referring to a product called Bit Defender. I have had good success with it vs. Norton.

It found and stopped a wider range of evil and is not remotely the resource hog that Norton is.

 

[paulhthomas]

I don't think you'll be able.
Mcafee release what they refer to as NAP files.
They've released a NAP for Norton AV so you can check it to ePO. I don't think they've got one for Bit Defender.If you want an app to roll out a piece of software do it via group policy

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

Thanks for this

 

[paulhthomas]

no worries, need any help, let me know

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

I will read up on Common Management Agent on their website and possibly get back to you.
The retailer has asked me to assist where I can. When it comes to networking it would be tantamount to the partially sighted leading the leagally blind however, it's an area I would like to learn more about.

 

[paulhthomas]

well if you're going to look into an anti virus solution that you need to centraly manage I wouldn't personally choose anything apart from Mcafee Entperise Edition, Cymantec Corporate Edition, or the new edition of Sophos.
Symantec's ok, up to a certain amount of clients. once you get to multiple sites where you can't mentally keep track of what's going on. that's where ePO comes in, AD sync's etc makes your life a lot easier.
The only thing is cost. ePO is quite costly, but it's the muts nuts!

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

Paul:
Could you comment on these two issues?

The retail setting has a network of 5 computers running XPP and a DOS POS system with two DOS POS cash terminals. If they were to download a virus would the virus infect the DOS machines as well or just the Windows units?

I have a friend who tells me that everytime he boots up his machine his system looks for network drives. He is not connected to a network though. Anyway of turning this off?

Thanks

Tom

 

[paulhthomas]

hi again,

the virus could infect the DOS machines but to be honest I doubt it. Virus' tend to be written to attack certain exploits in certain operating systems (which is why Microsoft release their security updates every time they find a vulnerability), they also then spread by using email or file shares (neither of which you'd have on your DOS POS).

Not sure about the network drives question to be honest.
It maybe a default action if there's a network card installed in the machine. does it say where it's trying to map them?

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

thanks on the AV

i will investigate the network card issue

 

[paulhthomas]

again, any problems or queries, post them back here.

Cheers

Paul

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

I thought I was the only nut up at this time of the day until I saw where you are located.
Small world, my wife is from Machynlleth.
Thanks

 

[paulhthomas]

ah, not too far away then.
Well it is at the moment because I'm in a course in Oxford

Paul Thomas
Network+ - Passed
70-210 - Passed
70-290 - Passed
70-291 - Passed
70-293 - Working towards

 

[matanzas]

Actually I am a bit removed as well as we live on the east coast of Canada. Hence the reference to "this time of day". It's a beatuiful sunrise this morning.