Install software on McAfee ePO

If MVISION ePO is not installed in your environment, you can install MVISION EDR locally on the McAfee ePO server.

Before you begin

  • Make sure that you have McAfee ePO 5.9.1 or later installed.
  • For information about deploying McAfee Agent to endpoints, see the McAfee Agent Installation Guide.

Task

  1. Log on to MVISION EDR as administrator.
  2. Click the configuration icon on the top-right corner to access the Configuration page.
  3. On the Configuration page, select Use McAfee ePO on-premise for management.
    Important: Make sure you select the correct configuration. This setting can only be changed with the assistance of Customer Support.
  4. Click Save, then click Continue to confirm the configuration.
  5. In the View account settings section, you can opt to share telemetry data by clicking I choose to share telemetry data (defined below) with McAfee, then click Save.
  6. Check in the MVISION EDR extension:
    1. Log on to McAfee ePO as administrator.
    2. Select MenuSoftwareSoftware Manager / Software Catalog, then under Product Categories search for MVISION EDR.
    3. Select the MVISION Endpoint Detection and Response product to view the list of available components.
    4. For the MVISION-EDR component, under Actions click Check In.
    5. Read the McAfee End User License Agreement and select the I accept the terms in the license agreement checkbox.
    After checking in the MVISION EDR extension, all dependent extensions and packages are installed.
    • MVISION Cloud Bridge
    • MVISION EDR Endpoint Snapshot Tool
    • MVISION EDR
    • McAfee Data Exchange Layer extensions
    • McAfee Data Exchange Layer broker extensions
    • MVISION EDR Client
    • MVISION EDR Client Package
  7. Add your MVISION EDR account credentials to MVISION Cloud Bridge:
    1. On McAfee ePO, select MenuConfigurationServer SettingsMVISION Cloud Bridge.
    2. Click Edit.
    3. On the Edit MVISION Cloud Bridge page, enter the email address and password created for MVISION EDR, then click Save.
    4. On MVISION EDR Settings, check if the connection status is successful.
      Important: If your tenant is hosted in a Frankfurt or Sydney data center, go to McAfee ePO and select MenuConfigurationServer SettingsMVISION EDR Settings and change the DXL Cloud Databus URL to:
      • Frankfurt data center — https://api.soc.eu-central-1.mcafee.com/cloud-connectors/v1/produce
      • Sydney data center — https://api.soc.ap-southeast-2.mcafee.com/cloud-connectors/v1/produce
      • Canada data center — https://api.soc.ca-central-1.mcafee.com/cloud-connectors/v1/produce
    The message This server is actively linked appears.
  8. Deploy the MVISION EDR client to devices:
    1. On McAfee ePO, select MenuSoftwareProduct Deployment, then click New Deployment.
    2. Enter a name and description for the deployment task.
    3. Select McAfee MVISION EDR Client as the software package.
    4. Click Select Individual Systems.
    5. From System Tree, on the System Selection page, select the devices where you want to deploy the MVISION EDR client, then click OK.
    6. Click Run Immediately to start the deployment task immediately.
    7. Click Save.
  9. On MVISION EDR, click the configuration icon to access the Configuration page:
    1. Select Install components, then click Done.
    2. Select Configure data sources, click McAfee ePO, and verify whether the connection status is green.
  10. Run a search in historical trace data and real-time search to verify that all basic components are now installed and MVISION EDR is connected to McAfee ePO. For more information, see the MVISION EDR Product Guide.
    To install MVISION EDR on another McAfee ePO system, follow steps 6 through 10.