
APAC region servers
There are small offices in the APAC region with slow WAN links back to the McAfee ePO server in the
UK. Plus these WAN links are already saturated with traffic. This means replication from the McAfee
ePO server to an APAC repository is not feasible unless it is done during off hours. This is a reasonable
option if you want to put SuperAgents in APAC.
Fortunately, the APAC offices each have their own fast dedicated connections out to the Internet and
do not have to route Internet traffic back to the data center in the UK. That provides two potential
solutions:
• You can adjust the client tasks in APAC to have them go to the next nearest repository which may
be in California.
You must completely randomize the agents updating schedule so you
spread their updates throughout the day.
• You can put a SuperAgent in the DMZ (publicly accessible on the Internet) at one of our data
centers. Then adjust the APAC client tasks forcing them to only update from this SuperAgent in the
DMZ. Because the SuperAgent is local to the data center replication from ePO will be very fast. And
since the agents don’t have to use a WAN link and can go straight to the Internet your slow WAN
bandwidth concerns are solved.
Improve agent update performance
In large environments, the ePolicy Orchestrator server is already very busy distributing policies and
collecting events. You can improve performance by changing the agent policy so agents don't pull
content from the McAfee ePO server itself, the default master repository. Making this change forces
the agents to use only the repositories you created manually.
In smaller environments, where fewer nodes are managed, there's no
need to make this change. The server can handle all of these tasks
without impacting performance.
1
Open the Policy Catalog.
2
From the Product list, select McAfee Agents then from the Category list, select General.
3
Click Edit Setting and the Repositories tab.
3
Using distributed repositories to keep your security software up to date
How many repositories do you need
28
McAfee
®
ePolicy Orchestrator
®
Best Practices Guide for use with ePolicy Orchestrator versions 4.5.0 and 4.0.0
Comentarios a estos manuales