Specifications

• UNC share repositories

• SuperAgents

There are several things to keep in mind about these repositories:

• The McAfee ePO server requires certain protocols be used for the repositories, but any server

vendor can provide those protocols. For example, if you use an HTTP repository you can use either

Microsoft Internet Information Services (IIS) or Apache server (Apache is the faster option).

• The McAfee ePO server has no requirement for what operating system the repository uses. As long

as the McAfee ePO server can access the folders you specify to copy its content to and as long as

the agents can connect to the folder to download their updates everything works as expected

• Your agent updates and ePO replication are only as good as your repositories. If you are already

using one of these repositories and your environment works well, then do not change the

configuration.

If you are starting with a new installation, with no repositories, use a

SuperAgent because they are easy to configure and reliable.

FTP repositories

You can use an FTP server to host a distributed McAfee ePO server repository. You might already have

FTP servers in your environment and you can allow McAfee content to reside there as well.

FTP repositories are:

• Generally fast

• Can manage extensive load from the clients pulling data

• Helpful in a DMZ where HTTP may not be optimal and UNC shares can't be used

Using FTP servers your clients do not need authentication and can use anonymous logon to pull their

content. No authentication reduces the chance a client might fail to pull its content.

HTTP repositories

You can use an HTTP server to host a distributed McAfee ePO server repository. You might already

have HTTP servers in your environment placed in the proper regional locations.

HTTP servers can be very fast serving out files to large environments. An HTTP server like Apache is a

good example. Your HTTP servers allow clients to pull their content without authentication. No

authentication reduces the chance a client might fail to pull its content.

UNC share repositories

You can use Universal Naming Convention (UNC) shares to host your McAfee ePO server repository.

Since most administrators are familiar with the concept of UNC shares this might seem like the easiest

method to choose. But, this might not be true.

If you chose to use UNC shares, you must:

Repositories

FTP repositories

McAfee

ePolicy Orchestrator

4.0 and 4.5 Best Practices Guide