McAfee Change Control and Application Control Installation Guide For use with epolicy Orchestrator and 4.6.0

Transcription

1 MAfee Chnge Control n Applition Control Instlltion Guie For use with epoliy Orhestrtor n 4.6.0

2 COPYRIGHT Copyright 2011 MAfee, In. All Rights Reserve. No prt of this pulition my e reproue, trnsmitte, trnsrie, store in retrievl system, or trnslte into ny lnguge in ny form or y ny mens without the written permission of MAfee, In., or its suppliers or ffilite ompnies. TRADEMARK ATTRIBUTIONS AVERT, EPO, EPOLICY ORCHESTRATOR, FOUNDSTONE, GROUPSHIELD, INTRUSHIELD, LINUXSHIELD, MAX (MCAFEE SECURITYALLIANCE EXCHANGE), MCAFEE, NETSHIELD, PORTALSHIELD, PREVENTSYS, SECURITYALLIANCE, SITEADVISOR, TOTAL PROTECTION, VIRUSSCAN, WEBSHIELD re registere tremrks or tremrks of MAfee, In. n/or its ffilites in the US n/or other ountries. MAfee Re in onnetion with seurity is istintive of MAfee rn prouts. All other registere n unregistere tremrks herein re the sole property of their respetive owners. LICENSE INFORMATION Liense Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. 2 MAfee Chnge Control n Applition Control Instlltion Guie

3 Contents Introution Components Prout oumenttion Instlling the softwre Reviewing prerequisites Instlling the Soliore extension Entering lienses Instlling the Soliore lient Aing the pkge to the MAfee epo repository Instlling the Soliore lient on the enpoints Verifying the Soliore lient instlltion Enling the Soliore lient Upgring the softwre Upgring the Soliore extension Upgring the Soliore lient Aing the Soliore lient pkge to the repository Chnging the moe of the Soliore lients Upgring the Soliore lient on the enpoints Verifying the Soliore lient upgre Pling the enpoints in Enle moe Uninstlling the softwre Removing the Soliore lient Removing the Soliore extension Removing the Soliore lient pkge FAQs MAfee Chnge Control n Applition Control Instlltion Guie 3

4 Introution This guie provies informtion you nee to instll, upgre, n uninstll the MAfee Chnge Control n MAfee Applition Control softwre in the MAfee epoliy Orhestrtor mnge environment. Contents Components Prout oumenttion Components Chnge Control n Applition Control softwre require the following omponents to e instlle n running: MAfee epo server n repository - Mngement tool tht instlls softwre n eploys poliies on the mnge enpoints. It lso llows you to monitor lient tivity, rete reports, n store n istriute ontent n softwre uptes. MAfee Agent Agent instlle on mnge system tht ts s the intermeiry etween the Soliore lient n MAfee epo server. It sens t to the lient from the MAfee epo server n vie vers. Soliore extension Integrtes with the MAfee epo onsole n provies Chnge Control n Applition Control fetures. Soliore lient Softwre omponent tht provies hnge monitoring, hnge prevention, n whitelisting fetures on the enpoints on whih it is instlle. Prout oumenttion To ess the oumenttion for the Chnge Control or Applition Control prout, use the MAfee ServiePortl ( 1 Nvigte to the MAfee ServiePortl. 2 Clik Prout Doumenttion uner Self Servie. 3 Selet the prout. 4 Selet version. 5 Selet prout oument. Douments ville The following prout ouments re ville (s PDF files) from the MAfee Downlos site ( n MAfee ServiePortl. 4 MAfee Chnge Control n Applition Control Instlltion Guie

5 Introution Prout oumenttion Instlltion Guie: Provies instrutions for instlling, upgring, n uninstlling the Chnge Control or Applition Control softwre Prout Guie: Introues the prout n provies etile instrutions for onfiguring n using the prout fetures Chnge Control Evlution Guie: Provies etile proeures to implement ommon file monitoring n hnge prevention use ses Applition Control Evlution Guie: Provies etile proeures to implement whitelisting use ses Relese Notes: Highlights new fetures n provies importnt informtion for the relese MAfee Chnge Control n Applition Control Instlltion Guie 5

6 Instlling the softwre This setion esries how to instll Chnge Control or Applition Control in the MAfee epo environment. To instll the softwre, you must: 1 Review the prerequisites. 2 Instll the Soliore extension. 3 A the require lienses. 4 Instll n eploy the Soliore lient on the enpoints. Contents Reviewing prerequisites Instlling the Soliore extension Entering lienses Instlling the Soliore lient Reviewing prerequisites Before instlling Chnge Control or Applition Control, ensure tht your environment onforms to these requirements. Ensure tht the MAfee epo server n tse re instlle n onfigure. For instrutions, see the epoliy Orhestrtor Instlltion Guie n epoliy Orhestrtor Prout Guie. Ensure tht the MAfee Agent is instlle on eh enpoint on whih you wnt to instll Chnge Control or Applition Control. Downlo the Soliore extension pkge from the MAfee Downlos site. The Soliore extension file is typilly nme Soliore_<version>.zip. Downlo the Soliore lient pkge from the MAfee Downlos site. The following tle lists the ville Soliore lient pkges. Operting system Mirosoft Winows Linux Solris HP-UX AIX Pkge nme SOLIDCOR<version>-<uil>_WIN.zip SOLIDCOR<version>-<uil>_LNX.zip SOLIDCOR<version>-<uil>_SLR.zip SOLIDCOR<version>-<uil>_HPX.zip SOLIDCOR<version>-<uil>_AIX.zip NOTE: In the file nme, <version> n <uil> represent the version n uil numer ssoite with the prout. For exmple, the SOLIDCOR _WIN.zip file inlues the Soliore lient (version n uil numer 2112) for the Winows pltform. 6 MAfee Chnge Control n Applition Control Instlltion Guie

7 Instlling the softwre Instlling the Soliore extension Ensure tht the enpoints on whih you nee to instll the Soliore lient re supporte (see KB73341). Determine the tse sizing requirements for your setup (see KB72753). Review the minimum system requirements for MAfee Chnge Control n Applition Control (see KB72867). Review the relese notes to quint yourself with the known issues n ientify epenenies you nee to onsier. Instlling the Soliore extension The Soliore extension instlls on versions 4.5 n 4.6 of the epoliy Orhestrtor server. Use this tsk to instll the Soliore extension. Before you egin Downlo the Soliore_<version>.zip file from the MAfee Downlos site. Review the relese notes to quint yourself with the known issues n ientify epenenies you nee to onsier. Tsk For option efinitions, lik? in the interfe. 1 Ensure tht the extension file is store t n essile lotion. 2 Selet Menu Softwre Extensions. The Extensions pge ppers. 3 Clik Instll Extension. 4 Browse n selet the SOLIDCORE_<VERSION>.zip file. 5 Clik OK. 6 Verify the informtion on the Instll Extension pge, then lik OK. 7 Verify tht the Soliore prout nme ppers in the Extensions list. Entering lienses Lienses etermine the prout fetures ville to you. At time, you n enle one or ll fetures. Use this tsk to lienses to enle the require fetures. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Configurtion Server Settings. The Settings Ctegories pge ppers. 2 Selet Soliore n lik Eit. The Eit Soliore pge ppers. 3 Enter the liense keys. NOTE: Evlution lienses re vli only for 30 ys. MAfee Chnge Control n Applition Control Instlltion Guie 7

8 Instlling the softwre Instlling the Soliore lient 4 Clik Sve. Instlling the Soliore lient You n instll n eploy the Soliore lient on Winows, Linux, Solris, HP-UX, n AIX pltforms. For ll supporte pltforms, the Soliore lient works well on oth physil n virtul mhines (VM). 1 A the Soliore lient pkge to the MAfee epo repository. 2 Instll the Soliore lient on the enpoints. NOTE: On ll UNIX pltforms, if you re using MAfee Agent 4.5 (erlier thn pth 1), restrt the MAfee Agent servie fter you instll, uninstll, or upgre the Soliore gent. 3 Verify tht the Soliore lient is instlle suessfully. 4 Enle the Soliore lient on the enpoints. Contents Aing the pkge to the MAfee epo repository Instlling the Soliore lient on the enpoints Verifying the Soliore lient instlltion Enling the Soliore lient Aing the pkge to the MAfee epo repository Use this tsk to the Soliore lient pkge to the MAfee epo repository. Before you egin Downlo the Soliore lient pkge from the MAfee Downlos site. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Softwre Mster Repository. The Pkges in the Mster Repository pge ppers. 2 Selet Ations Chek In Pkge. 3 Set the pkge type to Prout or Upte (.ZIP). 4 Browse n selet the pkge zip file. 5 Clik Next. The Pkge Options pge ppers. 6 Confirm the informtion. Pkge Info: Verify the pkge etils. Brnh: Selet the esire rnh. Set to Current for new prouts. Options: Optionlly, selet the Move the existing pkge to the Previous rnh option to move n existing pkge to the previous rnh. Pkge signing: Inites if the pkge is signe y MAfee or is thir-prty pkge. 8 MAfee Chnge Control n Applition Control Instlltion Guie

9 Instlling the softwre Instlling the Soliore lient 7 Clik Sve to the pkge. The new pkge ppers in Pkges in Mster Repository list. Instlling the Soliore lient on the enpoints Use this tsk to instll the Soliore lient on the enpoints. Before you egin Ensure ll enpoints on whih you wish to instll the Soliore lient re e to the MAfee epo onsole n hve MAfee gent instlle. Ensure tht the Soliore lient pkge is ownloe n e to the MAfee epo repository. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps for the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the MAfee Agent prout n Prout Deployment tsk type, then lik Crete New Tsk. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps for the MAfee epo 4.5 onsole: e Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet Prout Deployment. Speify the enpoints to onsier, then lik Next. The Configurtion pge ppers. 4 Selet the trget pltform. For exmple, when instlling the Soliore lient pkge on the Winows operting system, selet Winows s the trget pltform. 5 Speify the omponent n tion. Selet the pproprite pkge from the Prouts n omponents list. MAfee Chnge Control n Applition Control Instlltion Guie 9

10 Instlling the softwre Instlling the Soliore lient Selet the Instll tion. Selet the lnguge of the pkge. Speify the rnh from whih to the pkge. 6 Clik Sve (MAfee epo 4.6 only). 7 Clik Next. The Sheule pge ppers. 8 Speify sheuling etils then lik Next. 9 Review n verify the tsk etils, then lik Sve. 10 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. Verifying the Soliore lient instlltion Use this tsk to verify tht the Soliore lient ws instlle suessfully on n enpoint. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Selet group or enpoint from the list. The Systems t provies etils for the selete noe. 3 Review logs from the MAfee epo onsole. Selet system on the Systems pge. Selet Ations Agent Show Agent Log to view the gent log for the enpoint. NOTE: By efult, gent logs re not enle on the MAfee epo onsole. For informtion on how to enle gent logs, see the epoliy Orhestrtor Prout Guie. Chek the log to verify if the softwre ws suessfully instlle t the enpoint. 4 Review the properties for the system. Wke up the gent to feth properties immeitely. Typilly, informtion is exhnge etween the gent n server fter the gent-to-server-ommunition intervl (ASCI) lpses. Defult ASCI vlue is 60 minutes. Sen n gent wke-up ll to ensure immeite ommunition n t exhnge etween the server n the gent, without witing for the ASCI to expire. Clik system on the Systems pge. The etils for the selete system re isplye. Perform one of these tions: On the MAfee epo 4.6 onsole, lik the Prouts t n review the Soliore version. Clik the row to review itionl informtion, inluing the prout version n instlltion pth. On the MAfee epo 4.5 onsole, sroll n review the Soliore setion. Confirm the prout version n instlltion pth. Enling the Soliore lient Use this tsk to ple the Soliore lient in Enle moe. 10 MAfee Chnge Control n Applition Control Instlltion Guie

11 Instlling the softwre Instlling the Soliore lient Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps from the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the Soliore prout n SC: Enle tsk type, then lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps from the MAfee epo 4.5 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet SC: Enle (Soliore 6.0.0), then lik Next. The Configurtion pge ppers. 4 Selet the pltform. 5 Selet the supltform (only for the Winows n Unix pltforms). 6 Selet the version (only for the All exept NT/2000 supltform). 7 Inite whether to enle Chnge Control, Applition Control, or oth. 8 Enle Chnge Control on Soliore lient version or erlier y seleting the Fore Reoot with the tsk option to restrt the enpoint. Restrting the system is neessry to enle the softwre. A pop-up messge is isplye t the enpoint 5 minutes efore the enpoint is restrte. This llows the user to sve work n t on the enpoint. 9 Complete these steps to enle Applition Control if you re using Soliore lient version or lter on the supporte Winows pltforms. NOTE: Soliore lient version 6.0 is not ville for the Winows NT, Winows 2000, Linux, Solris, n WinRiver Linux pltforms. Speify the sn priority. The set sn priority etermines the priority of the thre tht is run to rete the whitelist on the enpoints. We reommen you set the sn priority to Low. This ensures tht Applition Control uses miniml performne impt on the enpoints ut might tke longer (thn when you set the priority to High) to rete the whitelist. MAfee Chnge Control n Applition Control Instlltion Guie 11

12 Instlling the softwre Instlling the Soliore lient Speify the tivtion option. Limite Feture Ativtion Full Feture Ativtion The enpoints re not restrte n limite fetures of Applition Control (memory protetion fetures re unville) re tivte. Memory Protetion fetures re ville only fter the enpoint is restrte. The enpoints re restrte, whitelist rete, n ll fetures of Applition Control inluing Memory Protetion re tive. Restrting the enpoints is neessry to enle the memory protetion fetures. The enpoint is restrte 5 minutes fter the lient tsk is reeive t the enpoint. A pop-up messge is isplye on the enpoint efore the enpoint is restrte. Selet the Strt Oserve Moe option to ple the enpoints in Oserve moe. The Oservtion moe feture is ville only on the Winows operting system. Optionlly, selet the Pull Inventory option. If you selet this option, the softwre fethes the inventory etils for the enpoints (fter the whitelist is rete) n mkes the etils ville on the MAfee epo onsole when the ASCI lpses. We reommen you selet this option if you wish to mnge the inventory using the MAfee epo onsole. 10 Complete these steps to enle Applition Control if you re using Soliore lient version or erlier. Selet the Perform Initil Sn to rete whitelist option to rete the whitelist when enling Applition Control. Applition Control requires the retion of list of ll truste exeutle files present on the enpoint system (known s the whitelist). The one-time tivity of reting the whitelist is known s whitelisting or soliifition. You n hoose to rete the inventory while enling the Soliore lient or efer to rete it lter. NOTE: If you efer the sn, run the SC: Initil Sn to rete whitelist lient tsk fter the SC: Enle tsk is pplie n system is restrte. Selet Fore Reoot with the tsk to restrt the enpoint fter soliifition is omplete. Restrting the system is neessry to enle the softwre. A pop-up messge is isplye t the enpoint 5 minutes efore the enpoint is restrte. This llows the user to sve work n t on the enpoint. 11 Clik Sve (MAfee epo 4.6 only). 12 Clik Next. The Sheule pge ppers. 13 Speify sheuling etils, then lik Next. 14 Review n verify the tsk etils, then lik Sve. 15 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. 16 Verify tht the softwre is enle. Wke up the gent to feth properties immeitely. Clik system on the Systems pge. The etils for the selete system re isplye. Perform one of these tions: On the MAfee epo 4.6 onsole, selet the Prouts t n review the Soliore version. Clik the row to review the liense sttus. On the MAfee epo 4.5 onsole, sroll n review the Soliore setion. Clik More n review the liense sttus. 12 MAfee Chnge Control n Applition Control Instlltion Guie

13 Upgring the softwre This setion esries how to upgre Chnge Control or Applition Control. To upgre the softwre: 1 Upgre the Soliore extension 2 Upgre the Soliore lient on the enpoints NOTE: If you nnot upgre the Soliore lients on your ritil enpoints, the enpoints work well with the upgre Soliore extension. However, the new fetures ville in the version re not ville on the enpoints until you upgre the Soliore lient version. Contents Upgring the Soliore extension Upgring the Soliore lient Upgring the Soliore extension Use this tsk to upgre the Soliore extension. Before you egin Downlo the Soliore_<version>.zip file from the MAfee Downlos site. Review the relese notes to quint yourself with the known issues n ientify epenenies you nee to onsier. Bk up existing poliies y performing these steps: 1 Selet Menu Poliy Poliy Ctlog from the MAfee epo onsole. 2 Selet Soliore prout from the Prout list. 3 Clik Export. 4 Right-lik the link n selet Sve Link As or Sve Trget As. 5 Sve the file. Tsk For option efinitions, lik? in the interfe. 1 Ensure tht the extension file is store t n essile lotion. 2 Selet Menu Softwre Extensions. The Extensions pge ppers. 3 Clik Instll Extension. 4 Browse n selet the SOLIDCORE_<VERSION>.zip file. A wrning messge sttes tht the existing extension will e reple. MAfee Chnge Control n Applition Control Instlltion Guie 13

14 Upgring the softwre Upgring the Soliore lient 5 Clik OK. 6 Verify the informtion on the Instll Extension pge, then lik OK. 7 Verify tht the Soliore prout nme ppers in the Extensions list. 8 Verify tht migrtion of t ws suessful. Selet Menu Automtion Server Tsk Log. Chek if the Soliore: Migrtion server tsk ws omplete. This server tsk ompletes upgre-relte tivities. If the migrtion fils, review the server tsk log, resolve ny issues, n run the Soliore: Migrtion server tsk mnully to omplete the migrtion. NOTE: When you upgre the Soliore extension: Existing inventory n imge evition t is not migrte. After you upgre, you must feth inventory etils, s neee. One of the following ours for shors n reports: If you i not eit efult shor or report, the upgre opertion overwrites the shor or report. If you eite efult shor or report, the upgre opertion retins the eite shor or report n s the orresponing new shor or report with the new suffix. Upgring the Soliore lient You n upgre the Soliore lient on Winows, Linux, Solris, HP-UX, n AIX pltforms. For ll supporte pltforms, the Soliore lient works well on oth physil n virtul mhines (VM). For informtion on the supporte operting systems, see KB Here re the high-level steps to upgre the Soliore lient. 1 A the Soliore lient pkge to the MAfee epo repository. 2 Ple the enpoints in Upte or Disle moe. 3 Upgre the Soliore lient on the enpoints. NOTE: On ll UNIX pltforms, if you re using MAfee Agent 4.5 (erlier thn pth 1), restrt the MAfee gent servie fter you instll, uninstll, or upgre the Soliore gent. 4 Verify tht the Soliore lient is upgre suessfully. 5 Perform one of these tions fter you omplete the upgre of the Soliore lient on enpoints: If you ple the enpoints in Upte moe, exit the Upte moe. If you ple the enpoints in Disle moe, ple the enpoints in Enle moe. 6 Restrt the enpoints. Contents Aing the Soliore lient pkge to the repository Chnging the moe of the Soliore lients Upgring the Soliore lient on the enpoints 14 MAfee Chnge Control n Applition Control Instlltion Guie

15 Upgring the softwre Upgring the Soliore lient Verifying the Soliore lient upgre Pling the enpoints in Enle moe Aing the Soliore lient pkge to the repository Use this tsk to the Soliore lient pkge to the MAfee epo repository. Before you egin Downlo the Soliore lient pkge from the MAfee Downlos site. The following tle lists the ville Soliore lient pkges. Operting system Winows Linux Solris HP-UX AIX Pkge nme SOLIDCOR<version>-<uil>_WIN.zip SOLIDCOR<version>-<uil>_LNX.zip SOLIDCOR<version>-<uil>_SLR.zip SOLIDCOR<version>-<uil>_HPX.zip SOLIDCOR<version>-<uil>_AIX.zip NOTE: In the file nme, <version> n <uil> represent the version n uil numer ssoite with the prout. For exmple, the SOLIDCOR _WIN.zip file inlues the Soliore lient (version n uil numer 2112) for the Winows pltform. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Softwre Mster Repository. The Pkges in the Mster Repository pge ppers. 2 Selet Ations Chek In Pkge. 3 Set the pkge type to Prout or Upte (.ZIP). 4 Browse n selet the pkge zip file. 5 Clik Next. The Pkge Options pge ppers. 6 Confirm the informtion. Pkge Info: Verify the pkge etils. Brnh: Selet the esire rnh. Set to Current for new prouts. Options: Optionlly, selet the Move the existing pkge to the Previous rnh option to move n existing pkge to the previous rnh. Pkge signing: Inites if the pkge is signe y MAfee or is thir-prty pkge. 7 Clik Sve to hek in the pkge. The new pkge ppers in Pkges in Mster Repository list. MAfee Chnge Control n Applition Control Instlltion Guie 15

16 Upgring the softwre Upgring the Soliore lient Chnging the moe of the Soliore lients You n hoose to upgre in Upte or Disle moe. We reommen tht you upgre using the Upte moe. Use the Disle moe only if your enpoint in urrently in Disle moe. Contents Pling the enpoints in Upte moe Pling the enpoints in Disle moe Pling the enpoints in Upte moe Use this tsk to ple the enpoints in Upte moe. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps for the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the Soliore prout, SC: Begin Upte Moe tsk type, n lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps for the MAfee epo 4.5 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet SC: Begin Upte Moe (Soliore 6.0.0) n lik Next. The Configurtion pge ppers. 4 Enter the Workflow ID n omments. The workflow ID n e meningful esription for the upte winow. 5 Clik Sve (MAfee epo 4.6 only). 6 Clik Next. The Sheule pge ppers. 16 MAfee Chnge Control n Applition Control Instlltion Guie

17 Upgring the softwre Upgring the Soliore lient 7 Speify sheuling etils n lik Next. 8 Review n verify the tsk etils n lik Sve. 9 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. Pling the enpoints in Disle moe Use this tsk to ple the enpoints in Disle moe. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps for the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the Soliore prout, SC: Disle tsk type, n lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps for the MAfee epo 4.5 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet SC: Disle (Soliore 6.0.0) n lik Next. The Configurtion pge ppers. 4 Selet Fore Reoot with the tsk to restrt the enpoints. 5 Clik Sve (MAfee epo 4.6 only). 6 Clik Next. The Sheule pge ppers. 7 Speify sheuling etils n lik Next. 8 Review n verify the tsk etils n lik Sve. 9 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. MAfee Chnge Control n Applition Control Instlltion Guie 17

18 Upgring the softwre Upgring the Soliore lient Upgring the Soliore lient on the enpoints Use this tsk to upgre the Soliore lient on the enpoints. Before you egin Mke sure tht the Soliore lient pkge is ownloe n e to the MAfee epo repository. Mke sure tht the enpoint is in Upte or Disle moe. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps for the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the MAfee Agent prout, Prout Deployment tsk type, n lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps for the MAfee epo 4.5 onsole: e Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet Prout Deployment. Speify the enpoints to onsier n lik Next. The Configurtion pge ppers. 4 Selet the trget pltform. For exmple, when instlling the Soliore lient pkge on the Winows operting system, selet Winows s the trget pltform. 5 Speify the omponent n tion. Selet the pproprite pkge from the Prouts n omponents list. Selet the Instll tion. Selet the lnguge of the pkge. Set rnh to Current for new pkges. 18 MAfee Chnge Control n Applition Control Instlltion Guie

19 Upgring the softwre Upgring the Soliore lient 6 Clik Sve (MAfee epo 4.6 only). 7 Clik Next. The Sheule pge ppers. 8 Speify sheuling etils n lik Next. 9 Review n verify the tsk etils n lik Sve. 10 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. Verifying the Soliore lient upgre Use this tsk to verify tht the Soliore lient ws upgre suessfully on n enpoint. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Selet group or enpoint from the list. The Systems t provies etils for the selete noe. 3 Review logs from the MAfee epo onsole. Selet system on the Systems pge. Selet Ations Agent Show Agent Log to view the gent log for the enpoint. NOTE: By efult, gent logs re not enle on the MAfee epo onsole. For informtion on how to enle gent logs, see the epoliy Orhestrtor Prout Guie. Chek the log to verify if the softwre ws suessfully upgre t the enpoint. 4 Review the properties for the system. Wke up the gent to feth properties immeitely. Typilly, informtion is exhnge etween the gent n server fter the gent-to-server-ommunition intervl (ASCI) lpses. The efult ASCI vlue is 60 minutes. Sen n gent wke-up ll to ensure immeite ommunition n t exhnge etween the server n the gent, without witing for the ASCI to expire. Clik system on the Systems pge. The etils for the selete system re isplye. Perform one of these tions: On the MAfee epo 4.6 onsole, selet the Prouts t n review the Soliore version. Clik the row to review itionl informtion, inluing the prout version n instlltion pth. On the MAfee epo 4.5 onsole, sroll n review the Soliore setion. Confirm the prout version n instlltion pth. Pling the enpoints in Enle moe After you upgre the Soliore lient, you must ple the enpoints in Enle moe. If you upgre in Upte moe, exit the Upte moe. If you upgre in Disle moe, enle the Soliore lient. MAfee Chnge Control n Applition Control Instlltion Guie 19

20 Upgring the softwre Upgring the Soliore lient Contents Exiting the Upte moe Enling the Soliore lient Exiting the Upte moe Use this tsk to ple the enpoints k in Enle moe fter you omplete the require hnges in the Upte moe. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps for the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the Soliore prout, SC: En Upte Moe tsk type, n lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny informtion. 3 Complete these steps for the MAfee epo 4.5 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet SC: En Upte Moe (Soliore 6.0.0) n lik Next. The Configurtion pge sttes tht no other onfigurtion settings re require for the tsk. 4 Clik Sve (MAfee epo 4.6 only). 5 Clik Next. The Sheule pge ppers. 6 Speify sheuling etils n lik Next. 7 Review n verify the tsk etils n lik Sve. 8 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. 20 MAfee Chnge Control n Applition Control Instlltion Guie

21 Upgring the softwre Upgring the Soliore lient Enling the Soliore lient Use this tsk to ple the Soliore lient in Enle moe. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps from the MAfee epo 4.6 onsole. Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the Soliore prout, SC: Enle tsk type, n lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps from the MAfee epo 4.5 onsole. Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet SC: Enle (Soliore 6.0.0) n lik Next The Configurtion pge ppers. 4 Selet the pltform. 5 Selet the supltform (only for the Winows n Unix pltforms). 6 Selet the version (only for the All exept NT/2000 supltform). 7 Inite whether to enle Chnge Control, Applition Control, or oth. 8 Enle Chnge Control on Soliore lient version or erlier y seleting the Fore Reoot with the tsk option to restrt the enpoint. Restrting the system is neessry to enle the softwre. A pop-up messge is isplye t the enpoint 5 minutes efore the enpoint is restrte. This llows the user to sve work n t on the enpoint. 9 Complete these steps to enle Applition Control if you re using Soliore lient version or lter on the supporte Winows pltforms. Note tht Soliore lient version 6.0 is not ville for the Winows NT, Winows 2000, Linux, Solris, n WinRiver Linux pltforms. Speify the sn priority. MAfee Chnge Control n Applition Control Instlltion Guie 21

22 Upgring the softwre Upgring the Soliore lient The set sn priority etermines the priority of the thre tht is run to rete the whitelist on the enpoints. We reommen you set the sn priority to Low. This ensures tht Applition Control uses miniml performne impt on the enpoints ut might tke longer (thn when you set the priority to High) to rete the whitelist. Speify the tivtion option. Limite Feture Ativtion Full Feture Ativtion The enpoints re not restrte n limite fetures of Applition Control (memory protetion fetures re unville) re tivte. Memory Protetion fetures re ville only fter the enpoint is restrte. The enpoints re restrte, whitelist rete, n ll fetures of Applition Control inluing Memory Protetion re tive. Restrting the enpoints is neessry to enle the memory protetion fetures. The enpoint is restrte 5 minutes fter the lient tsk is reeive t the enpoint. A pop-up messge is isplye on the enpoint efore the enpoint is restrte. Selet the Strt Oserve Moe option to ple the enpoints in Oserve moe. The Oservtion moe feture is ville only on the Winows operting system. Optionlly, selet the Pull Inventory option. If you selet this option, the softwre fethes the inventory etils for the enpoints (fter the whitelist is rete) n mkes the etils ville on the MAfee epo onsole when the ASCI lpses. We reommen you selet this option if you wish to mnge the inventory using the MAfee epo onsole. 10 Complete these steps to enle Applition Control if you re using Soliore lient version or erlier. Selet the Perform Initil Sn to rete whitelist option to rete the whitelist when enling Applition Control. Applition Control requires the retion of list of ll truste exeutle files present on the enpoint system (known s the whitelist). The one-time tivity of reting the whitelist is known s whitelisting or soliifition. You n hoose to rete the inventory while enling the Soliore lient or efer it to lter. NOTE: If you efer the sn, run the SC: Initil Sn to rete whitelist lient tsk fter the SC: Enle tsk is pplie n system is restrte. Selet Fore Reoot with the tsk to restrt the enpoint fter soliifition is omplete. Restrting the system is neessry to enle the softwre. A pop-up messge is isplye t the enpoint 5 minutes efore the enpoint is restrte. This llows the user to sve work n t on the enpoint. 11 Clik Sve (MAfee epo 4.6 only). 12 Clik Next. The Sheule pge ppers. 13 Speify sheuling etils n lik Next. 14 Review n verify the tsk etils n lik Sve. 15 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. 16 Verify tht the softwre is enle. Wke up the gent to feth properties immeitely. Clik system on the Systems pge. The etils for the selete system re isplye. Perform one of these tions: 22 MAfee Chnge Control n Applition Control Instlltion Guie

23 Upgring the softwre Upgring the Soliore lient On the MAfee epo 4.6 onsole, selet the Prouts t n review the Soliore version. Clik the row to review the liense sttus. On the MAfee epo 4.5 onsole, sroll n review the Soliore setion. Clik More n review the liense sttus. MAfee Chnge Control n Applition Control Instlltion Guie 23

24 Uninstlling the softwre This setion esries how to uninstll Chnge Control or Applition Control. Complete these tsks to remove the softwre: 1 Remove the Soliore lient from the enpoints 2 Remove the Soliore extension from the MAfee epo onsole 3 Remove the Soliore lient pkge from the MAfee epo onsole Contents Removing the Soliore lient Removing the Soliore extension Removing the Soliore lient pkge Removing the Soliore lient Use this tsk to remove the Soliore lient. Before you egin Ensure the enpoints re in Disle moe. For more informtion, see the Pling the enpoints in Disle moe setion. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Systems System Tree. 2 Complete these steps for the MAfee epo 4.6 onsole: Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Assigne Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Client Tsk Assignment. The Client Tsk Assignment Builer pge ppers. Selet the MAfee Agent prout, Prout Deployment tsk type, n lik Crete New Tsk. The Client Tsk Ctlog pge ppers. Speify the tsk nme n ny esriptive informtion. 3 Complete these steps for the MAfee epo 4.5 onsole: 24 MAfee Chnge Control n Applition Control Instlltion Guie

25 Uninstlling the softwre Removing the Soliore extension e Perform one of these tions: To pply the lient tsk to group, selet group in the System Tree n swith to the Client Tsks t. To pply the lient tsk to n enpoint, selet the enpoint on the Systems pge n lik Ations Agent Moify Tsks on Single System. Clik Ations New Tsk. The Client Tsk Builer pge ppers. Speify the tsk nme n ny esriptive informtion. Selet Prout Deployment. Speify the enpoints to onsier n lik Next. The Configurtion pge ppers. 4 Selet the trget pltform. 5 Speify the omponent n tion. Selet the pproprite pkge from the Prouts n omponents list. Selet the Remove tion. Selet the lnguge of the pkge. Set rnh to Current for new pkges. 6 Clik Sve (MAfee epo 4.6 only). 7 Clik Next. The Sheule pge ppers. 8 Speify sheuling etils n lik Next. 9 Review n verify the tsk etils n lik Sve. 10 Optionlly, wke up the gent to sen your lient tsk to the enpoint immeitely. Removing the Soliore extension Use this tsk to remove the Soliore extension. Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Softwre Extensions. The Extensions pge ppers. 2 Selet Soliore from the Extensions list. 3 Clik Remove. When you remove the Soliore extension, the ll prout-speifi tles (SCOR tles) re remove from the tse. However, ll efult n user-efine shors n reports re retine in the tse. Removing the Soliore lient pkge Use this tsk to remove the Soliore lient pkge. MAfee Chnge Control n Applition Control Instlltion Guie 25

26 Uninstlling the softwre Removing the Soliore lient pkge Tsk For option efinitions, lik? in the interfe. 1 Selet Menu Softwre Mster Repository. The Pkges in Mster Repository pge ppers. 2 Selet Delete for pkge. 26 MAfee Chnge Control n Applition Control Instlltion Guie

27 FAQs Cn the sme Soliore lient e use for Chnge Control n Applition Control? The liense key etermines the fetures ville for use; ny or ll fetures n e use t time. At ny time, you n n enle new stok-keeping unit (SKU) on n enpoint on whih the Soliore lient is enle. For exmple, if you re urrently using Chnge Control n wish to n use Applition Control, omplete these steps. 1 Disle the Soliore lient on the enpoint. For more informtion, see the Pling the enpoints in Disle moe setion. 2 Enter the liense. For more informtion, see the Entering lienses setion. 3 Enle the Soliore lient on the enpoint. For more informtion, see the Enling the Soliore lient setion. Cn the Soliore lient e eploye on Virtul Mhine? The Soliore lient works on Virtul Mhine if the operting system instlle on the Virtul Mhine is supporte y the Soliore lient. For list of the supporte pltforms, see KB MAfee Chnge Control n Applition Control Instlltion Guie 27