Specifications

Server hardware Nodes updated Dedicated or shared
client hardware
Single 3 Ghz processor with 4 GB of memory 3,000 Shared with other
applications
3,000 – 7,000 Dedicated
Server class hardware, dual-quad processor and 8
GB of RAM
5,000 – 7,000 Dedicated
Disk space needed for a repository is rarely a concern with today’s storage standards. Even if you
checked in several McAfee endpoint products, for example Endpoint Encryption, SiteAdvisor, and Policy
Auditor, your repository disk space would be in the 1 GB range.
To find out the exact size of your repository you can check the
installation folder where the McAfee ePO server is located under C:
\Program Files\McAfee\ePolicy Orchestrator\DB\Software.
The following sections provide some examples of three common organization sizes and their repository
size.
Example 1 — Small Organization with One Office
The small organization example has approximately 3,000 nodes of workstations and servers. It uses
McAfee VirusScan Enterprise, Host Intrusion Prevention System, Encryption, and Host Data Loss
Protection. It has a small data center in the same building where the devices reside so there are no
WAN links and all clients are on a 100 MB LAN.
In this example you can use the primary ePO server to act as the only repository. the McAfee ePO
server is always the master repository by default. For 3,000 clients, the McAfee ePO server can handle:
• Policy deployment
• Event collection
• Distributing all updates and software
Example 2 — Medium organization with four offices
The medium organization example has approximately 15,000 to 20,000 nodes. It has one data center
in New York where all traffic destined for the Internet must be routed. There are four offices in the
U.S. located in New York, San Francisco, Dallas, and Orlando. Each office has approximately 3,000 to
4,000 nodes with a T1 connection back to the New York office.
the McAfee ePO server, located in New York, manages all 20,000 nodes for policies and events for
Endpoint Encryption, VirusScan Enterprise, Host Intrusion Prevention System, and Application Control.
A dedicated SuperAgent repository is placed in each of the three major offices that connect to the data
center. These repositories are dedicated SuperAgent repositories that connect to the New York data
center with medium hardware class servers, for example a single processor 3 Ghz CPU and 4 GB of
RAM. Their only job is to serve out files to the McAfee Agents at each office.
Example 3 — Medium to Large Organization with Multiple Global offices
The medium-to-large organization example has 40,000 to 60,000 nodes distributed across three
major regions.
The U.S. offices have one data center in New York and three additional offices across the country. Each
office has approximately 7,000 nodes.
3
Repositories
Determine repository count
30
McAfee
®
ePolicy Orchestrator
®
4.0 and 4.5 Best Practices Guide