Product guide

The confidence levels associated with an executable are specified in numeric values. Each of these
values corresponds to the following confidence levels.
• 0 - Unknown • 4 - Medium Risk
• 2 - Very Low Risk • 5 - High Risk
• 3 - Low Risk • 6 - Very High Risk
• The confidence levels can't be modified and are imported as part of the baseline
computer profile.
• You can cancel the scan in the middle and still generate a valid XML file to be
imported by the target device.
4
To export and save the results in an XML format, click Export.
5
To view the details of the scan, click View Results.
The Endpoint Baseline Generator supports scanning external hard drives with fixed media, for
example, a hard disk drive or a flash drive.
Determining your discovery method
Host systems running Endpoint Intelligence Agents have two ways of determining the gateway to send
connection metadata to: static and dynamic.
Systems running Endpoint Intelligence Agent can have a combination of static and dynamic
configurations. When a connection attempt is made, Endpoint Intelligence Agent will check its route
configuration using the static or the dynamic mode.
Firewall Enterprise uses both static and dynamic modes. NTBA uses only the static mode.
• Static — If the connection has a destination IP address (Firewall Enterprise) / source IP address
(NTBA) that matches a route entry, McAfee EIA sends metadata to the specified gateway IP
address for that route.
• Dynamic — If the connection has a destination IP address that does not match any McAfee EIA
route entries, it only sends metadata when it receives a request.
1
Introduction
Determining your discovery method
12
Endpoint Intelligence Agent 2.1.0 Product Guide