Setup guide

McAfee ePO Advanced Suite Installer Product Guide
McAfee ePO
Advanced Suite Installer Page 17
Create custom policies
So far, we have assigned best practices policies that were created for you. At some point, you will have
to create policies to accommodate some requirements on your network. In this section, we will create
and assign two policies from scratch. This will show you the process from start to finish, and provide a
better understanding of policy creation and management in ePolicy Orchestrator.
Locking the Local VirusScan Console
Follow these steps to create a new policy that prevents end users from tampering with the local
VirusScan interface on their systems. VirusScan Enterprise runs on both workstations and servers;
therefore, the VirusScan policies have separate settings for each platform. In this case, you want to make
changes only
to the workstation settings.
1 Click Menu | Policy | Policy Catalog.
2 From the Product drop-down menu, select VirusScan Enterprise 8.8.0.
3 From the Category drop-down menu, select General Options Policies.
4 On the line that lists McAfee Default, click Duplicate.
5 For Name, type Lock VSE Console, then click OK.
Note: It is wise to name policies in a way that describes their function. Use of "named policies" then
makes it easier to assign them based on the role or function of systems.
6 Click Lock VSE Console, which now appears in the list of policies.
7 On the menu bar, click Password Options.
8 Make sure the Settings for option in the upper left is set to Workstation.
9 For User interface password, select Password protection for all items listed.
10 Type a password in the two boxes provided, then click Save.
As you might have noticed, the new policy was created by duplicating a default policy. Every policy you
have assigned up to this point also began as a duplicate of the McAfee Default policy from the Policy
Catalog. This new policy can now be assigned in the same manner as the policies above.
1 Click the System Tree button on the favorites bar.
2 Highlight My Organization.
3 Click the Assigned Policies tab.
• From the Product drop-down menu, select VirusScan Enterprise 8.8.0.
• On the line that lists General Options Policies, click Edit Assignment.
• For Inherit from, select Break inheritance and assign the policy and settings below.
• From the Assigned Policy drop-down menu, select Lock VSE Console.
• Click Save. The policy is now assigned to that group and all its subgroups.
As noted, the above policy was designed specifically for systems with a workstation operating system.
The local VirusScan console on servers will be accessible without a password.
Note: You can drag and drop commonly used items from the Menu onto the Favorites Bar at the top of
the ePolicy Orchestrator interface, as shown in the figure below.