Policies and Common

Policies let you configure, apply, and enforce settings for managed systems in your environment.

Policies are collections of settings that you create, configure, and apply, then enforce. Most policy settings correspond to settings that you configure in the Endpoint Security Client. Other policy settings are the primary interface for configuring the software.

Your managed product adds these categories to the Policy Catalog. The available settings vary in each category.

Common categories
Category Description

Configures general settings, including:

  • Specify client interface mode.
  • Require a password to uninstall the client.
  • Configure a time-based password.
  • Configure the client interface language.
  • Enable and disable Self Protection.
  • Specify processes to exclude from AAC.
  • Allow certificate authentication and upload third-party certificates.
  • Set up logging for client activity.
  • Configure proxy server settings.
  • Enable and disable default client updates.
  • Display managed custom tasks.

Customizing policies (McAfee ePO On-Premises)

Each policy category includes default policies.

You can use default policies as is, edit the My Default default policies, or create policies.

Common default policies
Policy Description Management platform
McAfee Default

Defines the out-of-the-box policy that takes effect if no other policy is applied. You can duplicate this policy, but you can't delete or change it.

My Default

Defines the customizable default policy for your environment.

Tip: Modify this policy to create your own customized default.

McAfee ePO On-Premises

Comparing policies

In McAfee ePO 5.0 and later, you can compare policies within the same policy category using Policy Comparison.

For information about policies and the Policy Catalog, see the McAfee ePO documentation.