ePolicy Orchestrator Agent and McAfee VirusScan 8.0i Frequently Asked Questions


	ePolicy Orchestrator Agent and McAfee VirusScan 8.0i Frequently Asked Questions What is ePolicy Orchestrator (ePO)? ePolicy Orchestrator is a network application that works with the ePolicy Orchestrator Agent installed on a workstation to schedule McAfee VirusScan installations, virus scans, and virus definition updates. What is the ePolicy Orchestrator (ePO) Agent? The ePO Agent is the link between the McAfee VirusScan software and the ePolicy Orchestrator network application. The ePolicy Orchestrator Agent receives communication from the ePO to know when and how to install McAfee VirusScan, schedule virus scans, and update virus definitions. What's the difference between the current McAfee VirusScan software and McAfee VirusScan 8.0i? While affording the same protections as before, Version 8.0i also provides additional protections against Internet-based virus attacks. It attempts to block Internet communications to your computer that are suspected to be virus activity. It also attempts to prevent viruses from using your computer to attack others over the network. This saves precious network resources and helps to keep your computer from being blocked from using the Internet. New features: Buffer Overflow Protection - prevents exploited applications from executing arbitrary code on your computer Access Protection - protects against IRC bots and unwanted FTP and e-mail programs from sending out data Unwanted Program Protection - protects against adware, spyware, and password cracking tools Whom is affected by the ePolicy Orchestrator and McAfee 8.0i upgrade? Affected are users on the FIU network with Microsoft Windows 2000 or Microsoft Windows XP who currently have an ePO Agent installed in conjunction with McAfee VirusScan. Users who currently use Windows 95 or Windows 98 will continue to receive virus definition updates but will retain their current ePO Agent and McAfee VirusScan versions. Windows Millennium is not supported by University Technology Services. Why is the upgrade to ePolicy Orchestrator and McAfee 8.0i necessary? It is necessary to better protect the workstations on the FIU network from current and emerging threats such as viruses, adware, spyware, intrusion, and compromises. How will I know that the upgrade is taking place? The first phase of the upgrade involves the ePO Agent. Once your computer has received the communication to upgrade, your current ePO Agent icon will disappear. The new ePO Agent icon should appear within 10 minutes after the upgrade was started, but it may take longer. The second phase of the upgrade involves McAfee VirusScan 8.0i. Once your computer has received the communication to upgrade, your current McAfee VirusScan icon will disappear. The new McAfee VirusScan 8.0i icon should appear within 10 minutes after the upgrade was started, but it may take longer. Once the McAfee VirusScan 8.0i installation has completed successfully, you should briefly see a red McAfee VirusScan splash screen on your monitor. Does the upgrade require my interaction? The ePO Agent upgrade and McAfee VirusScan 8.0i upgrade should not require any user interaction. Both upgrades are initiated from the ePolicy Orchestrator network application and are performed by the ePO Agent. Both upgrades are automated processes and are executed at random intervals throughout the day. Are there any known issues with the new ePO Agent and/or McAfee VirusScan 8.0i? On HP Omnibook series and Pavilion series computers and IBM Thinkpad series computers running Windows XP, a conflict exists between VirusScan Enterprise 8.0i and two system files. This conflict causes a crash during installation of VirusScan 8.0i. For this reason, before installing VirusScan, you need to update your existing Drive Letter Access (DLA) and RecordNow drivers. This step is required before an installation of McAfee VirusScan 8.0i is attempted. Please follow these instructions to insure a successful installation of McAfee VirusScan 8.0i on the above machines. If you are a Lotus Notes user and you are experiencing significant performance issues when accessing email, please follow the instructions documented in the following McAfee Knowledgebase article to disable the Lotus Notes scanner: Removing Lotus Notes E-mail Scan Components after installation of VirusScan Enterprise When I perform a right-click scan, viruses are detected but McAfee VirusScan does not take any action. Why doesn't McAfee VirusScan perform any actions and how do I remove the file(s) infected with viruses? According to the software vendor, the default action for a right-click initiated scan is continue scanning, even if viruses are detected, and this action cannot be changed. After the scan is complete, the user must determine whether to clean, quarantine, or delete the infected file(s) manually. On-Access scans (scans that work in the background) and On-Demand scans (scans that run on a set schedule) have default actions that can be adjusted and executed when viruses are detected. The default action for these types of scans is to clean the infected file(s) and then either quarantine or delete the infected file(s) if they cannot be cleaned.