McAfee ePolicy

[Cleetus]

Ok, corporate forced this on us, and they are still trying to figure the stupid thing out.

Our 2000 machines are working like a charm as they are also able to run 7.1/

Now, the 98 machines are vs 4.5.1 and the seem to be going hella slow. Noticed that the orchestrator is enforcing policies every 5 minutes. Is this something that will also hella slow down these 98 machines, and if so, what should I kick it back to instead of the 5 minutes. It is doing agent to server at 60 mintue intervals.

[Orangeman]

Hi Cleetus,

Are you talking about McAfee Antivirus V. 4.51?

IF so, that version is about at least 4 years old. I'm surprised they still service it. I thought it was retired two years ago.

Did you know McAFee is now up to version 8.0?

[hudsonsmith]

He's talking about VirusScan Enterprise. 7.1 is the current version but doesn't support 9x. 4.5.1 is the only corporate version which runs on 9x.

Don't know if this describes your problem: https://knowledgemap.nai.com/phpclie...&iterationID=2 We had 4.5.1 running until recently w/ no speed issues, but all the platforms were 2K or NT4.

[Cleetus]

He's talking about VirusScan Enterprise. 7.1 is the current version but doesn't support 9x. 4.5.1 is the only corporate version which runs on 9x.

Don't know if this describes your problem: https://knowledgemap.nai.com/phpclie...&iterationID=2 We had 4.5.1 running until recently w/ no speed issues, but all the platforms were 2K or NT4.

Nope, those fixes wouldn't work. But yes, this is what we are using on the 98 machines, the 2000 are using 7.1 enterprise. Gonna keep playing with it, so far today I haven't seen much happening though. On the slowest machines, have had to remove the exchange scan add-in from Outlook as it was causing all sorts of dll errors, printing problems and other stuff.

Mostly just concerned on why it needs to update policies every 5 minutes, seems like major overkill to me.

[drewmaztech]

In EPO Under "Directory"

"Epolicy Orch agent" - configuration

"Policy Enforment Interval" - default is 5min

I have it 30min without a problem. I would dare to even go up to 1hr.

You can raise a lot of the other settings here too. I noted it really bogged down my WAN at times.

[Cleetus]

Thanks, bumped it back to 30 minutes. Gonna see how that does. Kept the agent to server at 60 minutes.

[drewmaztech]

..and watch that auto-update manager that is supposed to download the dats automatically. It has a nasty habit of just stopping, without any error.