Setup guide

McAfee ePO Advanced Suite Installer Product Guide
McAfee ePO
Advanced Suite Installer Page 33
Appendix B: List of included eASI best
practice policies
The installer has been bundled with many best practice policies for the McAfee Endpoint Protection
suites. These starter policies include common best practice settings for VirusScan Enterprise, Desktop
Firewall, McAfee Agent, and Device Control. As every environment is different, these policies should be
thoroughly reviewed and modified to meet the needs of your specific environment. This section will
highlight the best practice policies that have been bundled with the installer.
McAfee Agent 4.6
General
The following policy allows administrators to view the McAfee Agent log on a remote client. It also
increases the Agent to Server Connection Interval from one hour to two:
• EASI - General
VirusScan Enterprise 8.8
Access Protection Policies
Policies supply exclusions specific to systems running McAfee Endpoint and McAfee Security for Microsoft
Exchange (MSME). The endpoint policy can be applied to servers and workstations. The Exchange policy
need only be applied to servers running both MSME and VirusScan Enterprise.
• EASI - McAfee Endpoint Protection Suite Clients
• EASI – Microsoft Exchange Servers
On-Access Default Processes Policies
The following policies have common file & directory exclusions and other optimizations specific to certain
server types. These policies are assigned to a group or system in conjunction with the corresponding
Low-Risk Processes Policies below that share the same name:
• EASI - Default: AD Domain Controller
• EASI - Default: DHCP and WINS Servers
• EASI - Default: Lotus Notes\Domino Servers
• EASI - Default: McAfee Endpoint Protection Clients
• EASI - Default: ePolicy Orchestrator Server
• EASI - Default: MS Exchange Servers
• EASI - Default: MS SharePoint Servers
• EASI - Default: MS SQL Servers
On-Access Low-Risk Processes Policies The following policies have common file & directory exclusions and
other optimizations specific to certain server types. These policies are assigned to a group or system in
conjunction with the corresponding Default Processes Policies above that share the same name:
• EASI - Low: AD Domain Controller
• EASI - Low: DHCP and WINS Servers
• EASI - Low: Lotus Notes\Domino Servers
• EASI - Low: McAfee Endpoint Protection Clients
• EASI - Low: ePolicy Orchestrator Server
• EASI - Low: MS Exchange Servers
• EASI - Low: MS SharePoint Servers
• EASI - Low: MS SQL Servers
KB66909 is the Master Exclusions KB article for VirusScan Enterprise.