McAfee Directory Services Connector extension

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "McAfee Directory Services Connector extension"

Transcription

1 Getting Started Guide Revision A McAfee Directory Services Connector extension For use with epolicy Orchestrator through 5.0

2 COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism, McAfee Artemis, McAfee CleanBoot, McAfee DeepSAFE, epolicy Orchestrator, McAfee epo, McAfee EMM, McAfee Enterprise Mobility Management, Foundscore, Foundstone, McAfee NetPrism, McAfee Policy Enforcer, Policy Lab, McAfee QuickClean, Safe Eyes, McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, SmartFilter, McAfee Stinger, McAfee Total Protection, TrustedSource, VirusScan, WaveSecure, WormTraq are trademarks or registered trademarks of McAfee, Inc. or its subsidiaries in the United States and other countries. Other names and brands may be claimed as the property of others. LICENSE INFORMATION License Agreement NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND. 2 McAfee Directory Services Connector extension Getting Started Guide

3 Contents Preface 5 About this guide Audience Conventions What's in this guide Finding documentation Find product documentation Find McAfee SaaS service documentation Introducing the McAfee Directory Services Connector 9 Advantages of the Directory Services Connector Limitations of Directory Integration Using the Directory Services Connector Installing Directory Services Connector 11 Install the Directory Services Connector extension Update the Directory Services Connector extension to a newer version Remove the Directory Services Connector extension Configuring the Control Console 13 Assign a Customer Admin account Create an distribution list Set Logical Structure to AD Domain Configuring epo for Directory Services Connector 15 Set up the Directory Services Connector server as a registered server Set up Identity Bridge for McAfee Cloud Single Sign On Set up the server for exception notifications Configure the debug level and increase log file size Add permissions for Directory Services Connector access Configure a service principal user account in Active Directory for use with Identity Bridge 21 6 Configuring browsers for the Identity Bridge feature of Cloud Single Sign On 23 Configure Firefox for internal network SSO Configure Internet Explorer for internal network SSO Configure Google Chrome for internal network SSO Setting up Directory Services Connector 27 Set up AD domain synchronizations for the Directory Services Connector Add new synchronization tasks for the Directory Services Connector Important considerations for group synchronization Run a manual synchronization McAfee Directory Services Connector extension Getting Started Guide 3

4 Contents Enable automatic synchronization Index 35 4 McAfee Directory Services Connector extension Getting Started Guide

5 Preface This guide provides the information you need to quickly install and configure both the epolicy Orchestrator software as well as the Directory Services Connector extension. Contents About this guide Finding documentation About this guide This information describes the guide's target audience, the typographical conventions and icons used in this guide, and how the guide is organized. Audience McAfee documentation is carefully researched and written for the target audience. The information in this guide is intended primarily for: Administrators People who implement and enforce the company's security program. Conventions This guide uses these typographical conventions and icons. Book title, term, emphasis Bold User input, code, message Interface text Hypertext blue Title of a book, chapter, or topic; a new term; emphasis. Text that is strongly emphasized. Commands and other text that the user types; a code sample; a displayed message. Words from the product interface like options, menus, buttons, and dialog boxes. A link to a topic or to an external website. Note: Additional information, like an alternate method of accessing an option. Tip: Suggestions and recommendations. Important/Caution: Valuable advice to protect your computer system, software installation, network, business, or data. Warning: Critical advice to prevent bodily harm when using a hardware product. McAfee Directory Services Connector extension Getting Started Guide 5

6 Preface Finding documentation What's in this guide This guide is organized to help you find the information you need. It is organized into chapters that group relevant information together by task, so you can go directly to the topic you need to successfully complete your installation or configuration. In addition to first time installation instructions for the Directory Services Connector extension, this guide covers: Configuring the connection to the Control Console. Setting up and scheduling the synchronization tasks for users and groups. Setting up Identity Bridge for McAfee Cloud Single Sign On. Configuring a service principal user account in Active Directory for Identity Bridge. Configuring browsers for Identity Bridge. Finding documentation If you have a grant, you should use the McAfee Technical Support ServicePortal to find product documentation and search the online KnowledgeBase. Otherwise, you should use the McAfee SaaS and Web Security Support site to find service documentation. Contents Find product documentation Find McAfee SaaS service documentation Find product documentation McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase. 1 Go to the McAfee Technical Support ServicePortal at 2 Under Self Service, access the type of information you need: To access... User documentation Do this... 1 Click Product Documentation. 2 Select a product, then select a version. 3 Select a product document. KnowledgeBase Click Search the KnowledgeBase for answers to your product questions. Click Browse the KnowledgeBase for articles listed by product and version. 6 McAfee Directory Services Connector extension Getting Started Guide

7 Preface Finding documentation Find McAfee SaaS service documentation McAfee provides the information you need during each phase of service implementation, from setup to daily use and troubleshooting. After a service update is released, information is added to the McAfee SaaS and Web Security Support site. 1 Go to the McAfee SaaS and Web Security Support page at 2 Under Knowledge Base, click Reference Materials. 3 Under Reference Materials, scroll down to access information that you need: Service Enhancements and Release Notes Training Materials Service Reference Guides McAfee Directory Services Connector extension Getting Started Guide 7

8 Preface Finding documentation 8 McAfee Directory Services Connector extension Getting Started Guide

9 1 Introducing 1 the McAfee Directory Services Connector Directory Services Connector is an extension for the epolicy Orchestrator (McAfee epo). Once installed, it allows you to synchronize the user accounts and groups in your active directory with those on the remote McAfee Control Console from your own network environment. With Identity Bridge enabled within Directory Services Connector and McAfee Cloud Single Sign On enabled on the Control Console, you can also allow users to access Cloud Single Sign On using their corporate network credentials as defined in your Active Directory. Contents Advantages of the Directory Services Connector Limitations of Directory Integration Using the Directory Services Connector Advantages of the Directory Services Connector The Directory Services Connector allows you to automatically add, remove, and update user information in the Control Console. Installing Directory Services Connector extension provides the following features: Simplifies the need to manually add, delete, or update users and groups Automatically assigns users to groups in the Control Console based on the group assignments in the Active Directory Runs locally in your own network and allows you to push changes as needed Schedules synchronization to run automatically one or more times per day With Identity Bridge, allows users to sign on to Cloud Single Sign On using corporate credentials stored in your company's Active Directory. Limitations of Directory Integration You should be aware of the limitations to Directory Integration that affect the Directory Services Connector. These limitations apply to both the push method used here as well as the pull method used in the Control Console. You must run separate synchronizations for each Active Directory domain You cannot synchronize more than 65,000 addresses at one time For manual synchronization, you are limited to 35,000 addresses in the user interface, and 65,000 addresses when downloading and reviewing the results in a file McAfee Directory Services Connector extension Getting Started Guide 9

10 1 Introducing the McAfee Directory Services Connector Using the Directory Services Connector You cannot limit the number of synchronization changes The Control Console limits group membership to 25,000. Group synchronizations fail if an Active Directory group contains more than 25,000 users. You cannot run a synchronization that includes only the addresses that have changed You must use Active Directory Directory Services Connector does not run on epolicy Orchestrator version and requires version through 5.0. Using the Directory Services Connector You should make all of the necessary modifications in the Control Console, McAfee epo, and the extension in order to use Directory Services Connector for push synchronization. To use Directory Services Connector, complete the necessary set up tasks: Configure the Control Console for push synchronization Connect to the remote Control Console from epo Connect to your Active Directory Domain server from epo Schedule synchronization tasks Push data from your Active Directory Domain server to the Control Console Enable Identity Bridge to authenticate Cloud Single Sign On users with Active Directory credentials. 10 McAfee Directory Services Connector extension Getting Started Guide

11 2 2 Installing Directory Services Connector The McAfee Directory Services Connector extension is installed using the software extension features of McAfee epo. When you install the Directory Services Connector version 3.1 on an epo that previously ran Versions 1.0 or 1.1 of the DSC, the DSC's server registration and all previously configured DSC tasks are removed. You will have to reconfigure these items. Contents Install the Directory Services Connector extension Update the Directory Services Connector extension to a newer version Remove the Directory Services Connector extension Install the Directory Services Connector extension Use this task to install the Directory Services Connector extension (zip) file in epolicy Orchestrator and the online help that supports Directory Services Connector. Before you begin Download the Directory Services Connector extension from Directory Integration page in the Control Console. Sign into the Control Console, and select Account Management Configuration. Ensure the Logical Structure field shows AD Domain. Then, click the link labeled Directory Services Connector extension. For option definitions, click? in the interface. 1 Ensure that you have the extension file in an accessible location on the network. 2 Click Menu Software Extensions, then click Install Extension. 3 Browse to select the extension (zip) file, then click OK. 4 Verify that the Directory Services Connector name appears in the Extensions list. McAfee Directory Services Connector extension Getting Started Guide 11

12 2 Installing Directory Services Connector Update the Directory Services Connector extension to a newer version Update the Directory Services Connector extension to a newer version Use this task to update an existing install of the extension with a newer version. When you update the Directory Services Connector from Version 1.0 or 1.1 to version 3.1, the DSC's server registration and all previously configured DSC tasks are removed. You will have to reconfigure these items. For option definitions, click? in the interface. 1 Ensure that you have the extension file in an accessible location on the network. 2 Click Menu Software Extensions, then click Install Extension. The Install Extension dialog box appears. 3 Browse to select the extension (zip) file, then click OK. The Install Extension page appears with information on the new version and a warning message that asks you if you want to replace the existing extension with the new version number. 4 Click OK. 5 Verify that the Directory Services Connector name appears in the Extensions list. Remove the Directory Services Connector extension Use this task to remove the Directory Services Connector extension (zip) file in epolicy Orchestrator. When you uninstall the Directory Services Connector extension, the DSC's server registration and all previously configured DSC tasks are removed. You will have to reconfigure these items when you reinstall the extension. For option definitions, click? in the interface. 1 Click Menu Software Extensions. The Extensions page displays the list of currently installed extensions. 2 In the left hand navigation under McAfee, select Directory Services Connector In the main section of the page, information for the Directory Services Connector extension appears. 3 To the right of the extension, Click Remove. A dialog box appears. 4 Click OK. The extension information disappears from the page. The extension is no longer running in epo. 12 McAfee Directory Services Connector extension Getting Started Guide

13 3 Configuring 3 the Control Console Before you can begin working with the Directory Services Connector, you will need to update settings in the Control Console. Contents Assign a Customer Admin account Create an distribution list Set Logical Structure to AD Domain Assign a Customer Admin account Directory synchronization requires that you have Customer Admin access or higher. McAfee recommends that you create a dedicated Customer Admin account in the Control Console for running Directory Services Connector. Create an distribution list Directory Services Connector requires that you have an distribution list set up in the Control Console for all notifications. Set Logical Structure to AD Domain Configure your Directory Integration settings in the Control Console by selecting AD Domain as your Logical Structure value. Before you begin You must be able to log on to the portal as a Customer Admin or higher. You will receive an error message in Directory Services Connector if you attempt to synchronize a domain that is not set to AD Domain. 1 Log on to the Control Console. 2 Select Account Management and then select Configuration. McAfee Directory Services Connector extension Getting Started Guide 13

14 3 Configuring the Control Console Set Logical Structure to AD Domain 3 From the Logical Structure drop down list, select AD Domain. The Domain field as well as the Directory Settings and Automatic Synchronization Settings options are no longer displayed. 4 Click Save. 14 McAfee Directory Services Connector extension Getting Started Guide

15 4 Configuring 4 epo for Directory Services Connector Some standard epo settings should be configured for use with the Directory Services Connector. Contents Set up the Directory Services Connector server as a registered server Set up Identity Bridge for McAfee Cloud Single Sign On Set up the server for exception notifications Configure the debug level and increase log file size Add permissions for Directory Services Connector access Set up the Directory Services Connector server as a registered server Use this task to set up the Directory Services Connector server as a registered server in epo. This provides the Directory Services Connector with everything it needs to communicate with the Control Console. Before you begin You must be able to log on to the Control Console as a Customer Admin or higher. Additionally, McAfee recommends that you create a dedicated Customer Admin account for managing the Directory Services Connector. For option definitions, click? in the interface. 1 Select Menu Configuration Registered Servers, then click New Server. 2 From the Server type menu, select Directory Services Connector. 3 Enter a unique name, any additional information about the server, and then click Next. 4 In the Control Console Hostname field, enter one of the two valid host names. portal.saascontrol.com console.saascontrol.com The host name you choose depends on whether the URL you use to log on to the Control Console contains the word portal or console. McAfee Directory Services Connector extension Getting Started Guide 15

16 4 Configuring epo for Directory Services Connector Set up Identity Bridge for McAfee Cloud Single Sign On If your URL looks like this... portal.example.com console.example.com Enter this valid host name... portal.saascontrol.com console.saascontrol.com Do not enter any other value for the host name. Do not mismatch "portal" and "console" values. Do not include the protocol, for example: If you are not sure which value you should use, contact your admin or support representative. 5 Type the user name and password you use to log on to the Control Console. 6 In the DSC Server Nickname field, provide a name to identify this instance of the Directory Services Connector. By default, the DSC Server Nickname is the same as your epo server name. The UID (Unit Identifier) field is populated automatically for the server after a synchronization. The UID can also be viewed in the Control Console to confirm the current DSC Registered Server associated with Directory Integration configuration for the customer. 7 Select and enter the Active Directory Server Name. 8 Enter the Username and Password for your Active Directory account. 9 To verify that you have configured the server information correctly, click Test. The Test button is enabled when you complete all of the required fields. 10 In AD Synchronization Settings, complete the options to set up an Active Directory server. 11 Click Save to register the server. The added Directory Services Connector server appears on the Registered Server page. Set up Identity Bridge for McAfee Cloud Single Sign On Use this task to set up the Identity Bridge portion of the Directory Services Connector registered server. The Identity Bridge is available only if Cloud Single Sign On is enabled for your company on the Control Console. The Identity Bridge provides the ability to automatically authenticate users with corporate network credentials when they sign on to the Control Console and other applications in the cloud. Before you begin Identity Bridge uses the Integrated Windows Authentication (IWA) capability of Active Directory. Therefore, your company's Active Directory must have a security principal administered so that Identity Bridge can retrieve authentication credentials for your users. See "Configure a service principal user account in Active Directory" in the Directory Services Connector Getting Started Guide or Directory Services Connector online help. To access the Control Console over the Identity Bridge, users must also configure their browsers. See "Configuring browsers for the Identity Bridge feature of Cloud Single Sign On" in the Directory Services Connector Getting Started Guide or Directory Services Connector online help. 16 McAfee Directory Services Connector extension Getting Started Guide

17 Configuring epo for Directory Services Connector Set up the server for exception notifications 4 1 Select Menu Configuration Registered Servers, then click the server name beginning with dsc. 2 From the Actions drop down list, select Edit. The Registered Server Builder: Description page appears. 3 Click Next. The Registered Server Builder: Details page appears. 4 Scroll down to the Identity Bridge Settings section. 5 Check the Identity Bridge Authentication checkbox to enable Identity Bridge and to enable the remaining configuration fields. 6 In the Company IP Address Range field, enter a single range of IP addresses, using CIDR notation, for example, /24. The range of IP addresses should include all users that can access Cloud SSO from a corporate sign in. The CIDR value must meet the following requirements: The IP address is valid. The netmask is between 24 and 32, inclusive. The IP address and netmask are compatible with CIDR notation. 7 In the epo Hostname field, Directory Services Connector automatically enters the epo server name and port number on which you are running Directory Services Connector and Identity Bridge, for example denver1.acme.com:8443. You must verify that the host name and port number are correct. If not, you must change them. In some cases, perhaps for traffic load balancing, you might wish to use the host name of a different epo server, if any, in your corporate network. Do not change the host name and default port number in the epo Hostname field unless you are sure the host name and port number you want to substitute will work. 8 In the Active Directory Server Principal Name field, enter the security principal name to be used to connect with Active Directory for authentication of users accessing the Control Console. The format of the name should be where HTTP and <AD_DOMAIN_NAME> are in all uppercase. For example, if you entered denver1.acme.com in Step 7 and the AD domain of your users is ADcorp1.int, you would enter HTTP/ 9 In the Server Principal Password field, enter the password for the security principal to be used when connecting to the Active Directory domain. 10 Click Save. Set up the server for exception notifications Edit the SMTP server settings for exception notifications. Directory Services Connector uses the epo Server from address to identify automatic messages originating from epo. The from address you configure in epo only affects exception notifications that originate from Directory Services Connector. If you have a different address configured in the Control Console, you will continue to receive notifications from that address for events that take place in the cloud. McAfee recommends configuring the same from address in both systems if this will cause confusion. McAfee Directory Services Connector extension Getting Started Guide 17

18 4 Configuring epo for Directory Services Connector Configure the debug level and increase log file size For option definitions, click? in the interface. 1 Select Menu Configuration Server Settings to open the Server Settings window. 2 From the Setting Categories list on the left, select Server. 3 Click Edit. 4 Enter all of the necessary information for your server and click Save. The new server settings display on the page. Your settings are now ready for use with notifications. Configure the debug level and increase log file size Modify the log file configuration to assist with troubleshooting and to increase the file size since, with multiple epo applications, the file can fill up quickly. For option definitions, click? in the interface. 1 Navigate to C:\Program Files (x86)\mcafee\epolicy Orchestrator\Server\conf\orion and edit the log config.xml file. 2 Add the following: <logger name="com.mcafee.saasc"> <level value="info"/> </logger> You may also increase the information level to debug by using the following: <logger name="com.mcafee.saasc"> <level value="debug"/> </logger> To turn on debug log for the Identity Bridge components of Cloud Single Sign On, add the following: <logger name="com.mcafee.identitybridge"> <level value="debug"/> </logger> 3 To increase the file size to the recommended size of 50 MB, change the "2" in the MaxFileSize line to "50:" <param name="maxfilesize" value="50mb"/> 4 Save the file. 5 Restart the epo Web Application Server service. a Open the Administrative Tools list on the server, and select Services. b From the Services window, select McAfee epolicy Orchestrator Server. 18 McAfee Directory Services Connector extension Getting Started Guide

19 Configuring epo for Directory Services Connector Add permissions for Directory Services Connector access 4 c Click Stop. This step will also stop the Event Parser entry. d e When the window enables the Start button, click Start. Click OK. You might also need to restart the epo Event Parser service. Check that it has started. 6 Navigate to C:\Program Files (x86)\mcafee\epolicy Orchestrator\Server\Logs\orion.log to view the log file. Add permissions for Directory Services Connector access You can set permissions for users of epolicy Orchestra for the use of Directory Services Connector. You can set a user's permissions for Directory Services Connector to one of the following: No permissions The user cannot access Directory Services Connector. View permissions The user can view settings withindirectory Services Connector but cannot make any changes. Edit permissions The user can create and edit settings withindirectory Services Connector. To add permissions, perform the following steps: For option definitions, click? in the interface. 1 Click Menu User Management Permission Sets. 2 On the Permission Sets page, select a user from the list. 3 Click Edit in the Directory Services Connector row. 4 Select the level of permissions you wish to give the user, and click Save. McAfee Directory Services Connector extension Getting Started Guide 19

20 4 Configuring epo for Directory Services Connector Add permissions for Directory Services Connector access 20 McAfee Directory Services Connector extension Getting Started Guide

21 5 Configure 5 a service principal user account in Active Directory for use with Identity Bridge Identity Bridge uses the Integrated Windows Authentication (IWA) capability of Active Directory. Therefore, your company's Active Directory must have a service principal so that Identity Bridge can authenticate users against Active Directory credentials when users access the Cloud Single Sign On Control Console. 1 Log on to your Active Directory. 2 Create a user in the AD domain to which Directory Services Connector communicates. 3 Open the Properties page for the user 4 Check the Member of tab to make sure the user is in the domain used by Directory Services Connector. 5 In the Account tab, check the entry in the User login name field. This name, plus the associated domain name must be entered into the Active Directory Server Principal Name field in the Registered Server page of Directory Services Connector. 6 Open the command line on the Active Directory server, and enter the following command at the command prompt:ktpass princ HTTP/<ePO server domain name> mapuser pass * ptype KRB5_NT_PRINCIPAL, where <epo server name> is the name of the epo server running Identity Bridge, <AD domain name> is the AD domain used for authentication, and is the security principal user you just created and the domain of the user. A prompt to enter a password and confirmation password is displayed. 7 Enter the password in both fields. 8 At the command line prompt, type setspn A HTTP/ <epo server domain name> where is the security principal user you just created. 9 On the Registered Server page in Directory Services Connector, in the Identity Bridge section, enter this security principal user name and domain in the Active Directory Server Principal Name field. For more information, see "Set up Identity Bridge for McAfee Cloud Single Sign On" in the Directory Services Connector Getting Started Guide or the Directory Services Connector online help. McAfee Directory Services Connector extension Getting Started Guide 21

22 5 Configure a service principal user account in Active Directory for use with Identity Bridge 22 McAfee Directory Services Connector extension Getting Started Guide

23 6 Configuring browsers for the Identity Bridge feature of Cloud Single Sign On If your company is enabled for Cloud Single Sign On and also uses the Identity Bridge feature, Cloud Single Sign On users must configure their browsers so that they can sign on to your company network and access Cloud Single Sign On without entering sign on credentials again. Supported browsers for use of the Identity Bridge feature are: Internet Explorer Firefox Chrome Contents Configure Firefox for internal network SSO Configure Internet Explorer for internal network SSO Configure Google Chrome for internal network SSO Configure Firefox for internal network SSO Configure the user's Firefox browser so that the user can use the Identity Bridge feature to access the Control Console from the company network without entering sign on credentials again. If Identity Bridge is enabled and a user fails to configure the Firefox browser for Identity Bridge, the user gets a blank page when tying to access the Control Console with Firefox. This is caused by an HTTP 401 authentication error. 1 In the Firefox browser url field, enter about:config. A warning page appears. 2 Accept the warning. 3 Scroll down the Preference Name column to network.negotiate auth.trusted uris, and doubleclick it. The Enter string value page appears. 4 In the Enter string value field, enter or *.<corporate_domain> and click OK. The value you enter appears in the Value column. You can also enter multiple values separated by commas. McAfee Directory Services Connector extension Getting Started Guide 23

24 6 Configuring browsers for the Identity Bridge feature of Cloud Single Sign On Configure Internet Explorer for internal network SSO 5 Scroll down the Preference Name column to network.automatic ntlm auth.trusted uris, and doubleclick it. The Enter string value page appears. 6 In the Enter string value field, enter the corporate domain, for example corp.acme.org and click OK. The corporate domain appears in the Value column. Configure Internet Explorer for internal network SSO Configure the user's Internet Explorer browser so that the user can use the Identity Bridge feature to access the Control Console from the company network without entering sign on credentials again. If Identity Bridge is enabled and a user fails to configure the Internet Explorer browser for Identity Bridge, the user gets a Windows Security page each time the user accesses the Control Console. If a user has trouble properly configuring Internet Explorer for Identity Bridge, the user should contact the company IT department. 1 Open Internet Explorer, and select Tools Internet Options. 2 Select the Security tab. 3 Click Local Intranet in the Select a zone or change security settings box. 4 Click Sites. 5 On the Local Intranet page, select Advanced. 6 In the Add this website to the zone field, add your corporate domain in the form *.<corporate_domain> or *.<corporate_domain>. 7 Click Close, and return to the main Internet Options page. 8 Click the Advanced tab. 9 In the Settings list, scroll down to the Security settings, and select the Enable Integrated Windows Authentication checkbox. 10 Click OK, and exit the Internet Options page. Configure Google Chrome for internal network SSO Configure the user's Google Chrome browser so that the user can use the Identity Bridge feature to access the Control Console from the company network without entering sign on credentials again. If Identity Bridge is enabled and a user fails to configure the Chrome browser for Identity Bridge, the user gets a Authentication Required page each time the user accesses the Control Console. If a user has trouble properly configuring Chrome for Identity Bridge, the user should contact the company IT department. 1 Right click the Google Chrome icon on your desktop, or, without actually opening Google Chrome, select Start All Programs Google Chrome 2 Select Properties from the pop up menu. 24 McAfee Directory Services Connector extension Getting Started Guide

25 Configuring browsers for the Identity Bridge feature of Cloud Single Sign On Configure Google Chrome for internal network SSO 6 3 In the Target field, add the following to the existing entry in the field: auth server whitelist="host.company.com", where host.company.com is your corporate domain. You can also enter multiple values separated by commas. 4 Click OK. McAfee Directory Services Connector extension Getting Started Guide 25

26 6 Configuring browsers for the Identity Bridge feature of Cloud Single Sign On Configure Google Chrome for internal network SSO 26 McAfee Directory Services Connector extension Getting Started Guide

27 7 Setting 7 up Directory Services Connector You should set up and schedule a synchronization task to automatically run for each of your Active Directory domains. Contents Set up AD domain synchronizations for the Directory Services Connector Add new synchronization tasks for the Directory Services Connector Important considerations for group synchronization Run a manual synchronization Enable automatic synchronization Set up AD domain synchronizations for the Directory Services Connector By default, a synchronization is created for each Active Directory domain when you set up the Directory Services Connector server as a registered server. However, you must configure and schedule AD domain synchronizations and ensure that user information is automatically updated in the Control Console. Before you begin Complete the following in the Account Management tab of the Control Console before synchronizing users. Set Directory Integration to AD Domain. Create an distribution list for exception notifications. Complete the following in epo. Under Configuration Server Settings, set up the Server for notifications. Under Configuration Registered Servers, set up the Directory Services Connector server type. For option definitions, click? in the interface. 1 From the toolbar, select Menu Automation Directory Services Connector to open the Active Directory Domain Synchronization page. 2 Set up a synchronization using one of the following: Select the checkbox for a Domain and then click Actions Edit. Mouse over the row for a domain to highlight it. Under the Actions column, click Edit. McAfee Directory Services Connector extension Getting Started Guide 27

28 7 Setting up Directory Services Connector Set up AD domain synchronizations for the Directory Services Connector The Directory Settings page appears. 3 Complete the options to set up the Active Directory server. 4 Enter valid values for Attribute and Search Filter. If you are using Exchange Servers with Active Directory, enter search values as follows. Required Field Attribute Search Filter Recommended value proxyaddresses (&(proxyaddresses=smtp:*)(name=*)) If you are not using Exchange Servers with Active Directory, enter other search values, commonly using the "mail" attribute as follows. Required Field Attribute Search Filter Recommended value mail (&(mail=*)(name=*)) 5 If necessary, select DSC Server Authorization to authorize this Directory Services Connector within the Control Console to synchronize this AD domain. Directory Services Connector authorization is required and you cannot continue or save without it. 6 Under Additional Attributes, select any or all of the following checkboxes if you want to collect the additional data from the Active Directory: First Name Mobile Phone Last Name Title Display Name Department This data can be useful if you use the Cloud SSO application and you automatically provision apps that user can access under the Cloud SSO umbrella. 7 To verify that the server information you entered is correct, click Test. 8 Click Next. The Group Synchronization page appears. 9 Select Enable to add group names for synchronization or to select existing groups for synchronization. 10 In the Group Name field, type the initial letters of a group you want to add. Directory Services Connector searches your Active Directory for matching group names and a list based on the characters you enter. Directory Services Connector synchronizes only Active Directory security groups, not distribution groups. 11 Select the group name you want, and click Add The group is added to the list. 12 Add other groups as needed. 28 McAfee Directory Services Connector extension Getting Started Guide

29 Setting up Directory Services Connector Add new synchronization tasks for the Directory Services Connector 7 13 Select the checkbox next to each group name you want to synchronize. If you add a group to an AD domain in Directory Services Connector, the group is automatically included in the synchronization of any other AD domains you add in Directory Services Connector. 14 Click Next. The Exception Notifications and Automatic Synchronization page appears. 15 From the Exception Notification Distribution drop down, select an distribution list. An active distribution list is required to save the synchronization settings. You can create the list in the Control Console. 16 Select the options for Exception Notification Content. 17 If necessary, enter a value to specify the User Deactivation Limit. 18 Under Automatic Synchronization leave Enable deselected for now. Run the synchronization manually first. If it works as you expect, return here, select Enable, and select: Enable automatic synchronization of Users Synchronizes users in the AD domain, without assigning them to groups in the Control Console. Enable automatic synchronization of Users and Groups Synchronizes users in the AD domain and assigns them to groups in the Control Console. 19 Under Schedule, select the frequency of how often you would like the task to run. 20 Click Save. The Directory Services Connector synchronization is set up and ready to run. McAfee recommends that you run the synchronization manually before enabling it to run automatically. Repeat this process for each of your Active Directory domains. Add new synchronization tasks for the Directory Services Connector Use this task to add new synchronization tasks for the Directory Services Connector. Each Active Directory Domain is limited to one synchronization task. Before you begin Complete the following in the Account Management tab of the Control Console before synchronizing users. Set Directory Integration to AD Domain. Create an distribution list for exception notifications. Complete the following in epo. Under Configuration Server Settings, set up the Server for notifications. Under Configuration Registered Servers, set up the Directory Services Connector server type. McAfee Directory Services Connector extension Getting Started Guide 29

30 7 Setting up Directory Services Connector Add new synchronization tasks for the Directory Services Connector For option definitions, click? in the interface. 1 From the toolbar, select Menu Automation Directory Services Connector to open the Directory Services Connector page. 2 Create a new AD domain synchronization using one of the following: Select Actions New. Click New. The Directory Settings page appears. 3 Complete the options to set up the Active Directory server. 4 Enter valid values for Attribute and Search Filter. Required Field Attribute Search Filter Recommended value proxyaddresses (&(proxyaddresses=smtp:*)(name=*)) 5 Select DSC Server Authorization to register this task with the Control Console. Directory Services Connector registration is required and you cannot continue or save without registering. 6 UnderAdditional Attributes, select the checkboxes for any additional attributes you want to include in the synchronization. 7 To verify that the server information you entered is correct, click Test. 8 Click Next. The Exception Notifications and Automatic Synchronization page appears. 9 From the Exception Notification Distribution drop down, select an distribution list. An active distribution list is required to save the task. You can create the list in the Control Console. 10 Select the options for Exception Notification ContentException Notification Distribution. 11 Under Automatic Synchronization leave Enable deselected for now. Run the task manually first. If it works as you expect, return here and select Enable. 12 If necessary, enter a value to specify the User Deactivation Limit. 13 Under Schedule, select the frequency of how often you would like the task to run. 14 Click Save. The Directory Services Connector task is set up and ready to run. McAfee recommends that you run the task manually before enabling it to run automatically. 30 McAfee Directory Services Connector extension Getting Started Guide

31 Setting up Directory Services Connector Important considerations for group synchronization 7 Important considerations for group synchronization Nested groups Active Directory allows administrators to add a group as a member of another group. When a group is a member of a parent group, Directory Services Connector synchronizes the users in the member group as well as users within the group explicitly identified within Directory Services Connector. The Control Console therefore includes all members of a parent group in its membership list, including those in any member groups. Group members in other AD domains Domain Local and Universal groups in Active Directory can contain members or groups who reside in other AD domains. In the case where group members reside in AD domains different from that of a group being synchronized, a synchronization includes only group members in that group's AD domain. To synchronize all members in a group when some members exist in different AD domains, you must synchronize all AD domains that contain members for the group. Groups that have migrated from one AD domain to another AD domain When a group is moved, or migrated, in Active Directory from one AD domain to another, the subsequent synchronization records this change in the Control Console. The migrated group retains the members that it previously had in the Control Console. However, the group's members continue to reside in the AD domain that they resided in prior to the migration. If you moved groups in Active Directory from one AD domain to another, first perform a synchronization on the AD domain to which you moved the groups, then perform a synchronization on the groups' old AD domain. This sequence avoids a temporary deactivation of those groups in the Control Console Run a manual synchronization Run Directory Services Connector manually to review and approve results. Running the task manually helps to ensure that the synchronization process is providing the desired results before enabling scheduled syncs. Before you begin Be sure to configure the Directory Services Connector synchronization task first. If you moved user accounts or groups in Active Directory from one AD domain to another, first perform a synchronization on the AD domain to which you moved the users or groups, then perform a synchronization on the users' or groups' old AD domain. This sequence avoids a temporary deactivation of those users or groups in the Control Console For option definitions, click? in the interface. 1 From the toolbar, select Menu Automation Directory Services Connector to open the Directory Services Connector page. 2 From the Active Directory Domain Synchronization task list, select the row of the task you want to run. McAfee Directory Services Connector extension Getting Started Guide 31

32 7 Setting up Directory Services Connector Enable automatic synchronization 3 Run the sync by doing one of the following: From the Actions column, click Sync Now. Select Actions Sync. A message displays: Directory Services Connector manual task synchronization has been successfully submitted. Submitting manual sync task: taskname The sync task can take time to complete. 4 When the system is ready, review the results of the manual sync task by doing one of the following: From the Actions column, click Review. Select Actions Review. The Directory Services Connector Review page appears. If your session expires, click your browser's refresh button or close and re open the Directory Services Connector Review window. 5 In the upper right corner, click Review. The page refreshes with the User Synchronization Details. 6 Review results by clicking each of the tabs. When you are done, click Approve. A confirmation message is displayed to confirm. 7 Click OK. The synchronization approval continues in the background. You can check the status dynamically in the Sync History window if the approval takes too long. The Control Console now includes all of the most recent changes in your Active Directory. Enable automatic synchronization Enable the Directory Services Connector task to run automatically based on the schedule you set previously. Before you begin Be sure to configure the Directory Services Connector task first. If you move user accounts in Active Directory from one AD domain to another, immediately perform a manual synchronization on the AD domain to which you moved the users. Synchronizing the new AD domain of the users prior to a synchronization of their old AD domain prevents a temporary deactivation of those users in the Control Console. For option definitions, click? in the interface. 1 From the toolbar, select Menu Automation Directory Services Connector to open the Directory Services Connector page. 2 From the Active Directory Domain Synchronization task list, select the row of the task you want to run. 32 McAfee Directory Services Connector extension Getting Started Guide

33 Setting up Directory Services Connector Enable automatic synchronization 7 3 Click Edit The Directory Setting window is displayed. 4 Click Next to display the second page. 5 Click Enable. A message displays verifying that the configuration has successfully updated. The sync task can take time to complete. 6 Click OK. The Active Directory Domain Synchronization page updates to show that the task is enabled, how often it will run, and the next time it will run. The task will run based on its scheduled options. Automatic syncs do not need to be reviewed. You can disable the task at anytime by repeating the process and selecting Disable. McAfee Directory Services Connector extension Getting Started Guide 33

34 7 Setting up Directory Services Connector Enable automatic synchronization 34 McAfee Directory Services Connector extension Getting Started Guide

35 Index A about this guide 5 Account Management 13 AD Domain 13 AD Synchronization Settings 15 Add synchronization tasks 29 Assign a customer admin account 13 Automatic Synchronization 32 C Configure the debug level 18, 19 console 15 Control Console 13, 15 conventions and icons used in this guide 5 Create an distribution list 13 Customer Admin account 13 D Debug 18, 19 Directory Integration 13 Directory Services Connector 15, 27, 29, 31, 32 Directory Settings 27, 29 documentation audience for this guide 5 product-specific, finding 6 typographical conventions and icons 5 E Distribution List 13 Server set-up 17 Enable automatic synchronization 32 Exception Notifications 17 Exception Notifications and Scheduling 27, 29 F Find documentation 7 L Logical Structure 13 M Manual Synchronization 31 McAfee ServicePortal, accessing 6 P portal 15 R Registered Server set-up 15 Run a manual synchronization 31 S ServicePortal, finding product documentation 6 Set logical structure to AD domain 13 Set up synchronization tasks 27, 29 Set up the Directory Services Connector as a registered server 15 Set up the server 17 SMTP Server 17 Synchronization s 27, 29, 31, 32 T s 27, 29, 31, 32 Technical Support, finding product information 6 Troubleshooting 18, 19 McAfee Directory Services Connector extension Getting Started Guide 35

36 A00

McAfee Directory Services Connector extension

McAfee Directory Services Connector extension Setup Guide Revision B McAfee Directory Services Connector extension For use with epolicy Orchestrator 4.6.1 and later COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

McAfee SaaS Email Archiving

McAfee SaaS Email Archiving User Guide McAfee SaaS Email Archiving COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism, McAfee

More information

Data Center Connector for vsphere 3.0.0

Data Center Connector for vsphere 3.0.0 Product Guide Data Center Connector for vsphere 3.0.0 For use with epolicy Orchestrator 4.6.0, 5.0.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

McAfee Cloud Single Sign On

McAfee Cloud Single Sign On Setup Guide Revision B McAfee Cloud Single Sign On COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

McAfee Endpoint Encryption for PC 7.0

McAfee Endpoint Encryption for PC 7.0 Migration Guide McAfee Endpoint Encryption for PC 7.0 For use with epolicy Orchestrator 4.6 Software COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee,

More information

Data Center Connector 3.0.0 for OpenStack

Data Center Connector 3.0.0 for OpenStack Product Guide Data Center Connector 3.0.0 for OpenStack For use with epolicy Orchestrator 5.1.0 Software COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee,

More information

McAfee Asset Manager Console

McAfee Asset Manager Console Installation Guide McAfee Asset Manager Console Version 6.5 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

McAfee SiteAdvisor Enterprise 3.5 Patch 2

McAfee SiteAdvisor Enterprise 3.5 Patch 2 Installation Guide McAfee SiteAdvisor Enterprise 3.5 Patch 2 For use with epolicy Orchestrator 4.5, 4.6 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

Setup Guide Revision B. McAfee SaaS Email Archiving for Microsoft Exchange Server 2010

Setup Guide Revision B. McAfee SaaS Email Archiving for Microsoft Exchange Server 2010 Setup Guide Revision B McAfee SaaS Email Archiving for Microsoft Exchange Server 2010 COPYRIGHT Copyright 2015 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766, www.intelsecurity.com

More information

Upgrade Guide. McAfee Vulnerability Manager Microsoft Windows Server 2008 R2

Upgrade Guide. McAfee Vulnerability Manager Microsoft Windows Server 2008 R2 Upgrade Guide McAfee Vulnerability Manager Microsoft Windows Server 2008 R2 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARKS McAfee, the McAfee logo, McAfee Active Protection,

More information

McAfee SaaS Archiving

McAfee SaaS  Archiving Administration Guide McAfee SaaS Email Archiving COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism,

More information

McAfee Content Security Reporter 2.0.0

McAfee Content Security Reporter 2.0.0 Product Guide Revision A McAfee Content Security Reporter 2.0.0 For use with epolicy Orchestrator 4.6.5 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

Setup Guide. Email Archiving for Microsoft Exchange Server 2003

Setup Guide. Email Archiving for Microsoft Exchange Server 2003 Setup Guide Email Archiving for Microsoft Exchange Server 2003 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

McAfee Enterprise Mobility Management 11.0 Software

McAfee Enterprise Mobility Management 11.0 Software Product Guide McAfee Enterprise Mobility Management 11.0 Software For use with epolicy Orchestrator 4.6.5-5.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

McAfee Public Cloud Server Security Suite

McAfee Public Cloud Server Security Suite Installation Guide McAfee Public Cloud Server Security Suite For use with McAfee epolicy Orchestrator COPYRIGHT Copyright 2015 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766,

More information

Setup Guide. Email Archiving for Microsoft Exchange Server 2010

Setup Guide. Email Archiving for Microsoft Exchange Server 2010 Setup Guide Email Archiving for Microsoft Exchange Server 2010 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

Product Guide Revision A. McAfee Web Reporter 5.2.1

Product Guide Revision A. McAfee Web Reporter 5.2.1 Product Guide Revision A McAfee Web Reporter 5.2.1 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

Setup Guide Revision A. WDS Connector

Setup Guide Revision A. WDS Connector Setup Guide Revision A WDS Connector COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee CleanBoot, McAfee

More information

McAfee Content Security Reporter 1.0.0 Software

McAfee Content Security Reporter 1.0.0 Software Product Guide Revision A McAfee Content Security Reporter 1.0.0 Software For use with epolicy Orchestrator 4.6.2 Software COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK

More information

Installation Guide. McAfee VirusScan Enterprise for Linux 1.9.0 Software

Installation Guide. McAfee VirusScan Enterprise for Linux 1.9.0 Software Installation Guide McAfee VirusScan Enterprise for Linux 1.9.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active

More information

McAfee Endpoint Security 10.0.0 Software

McAfee Endpoint Security 10.0.0 Software Installation Guide McAfee Endpoint Security 10.0.0 Software For use with epolicy Orchestrator 5.1.1 5.2.0 software and the McAfee SecurityCenter COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without

More information

Setup Guide. Email Archiving for Microsoft Exchange Server 2007

Setup Guide. Email Archiving for Microsoft Exchange Server 2007 Setup Guide Email Archiving for Microsoft Exchange Server 2007 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

Product Guide Revision A. McAfee Secure Web Mail Client 7.0.0 Software

Product Guide Revision A. McAfee Secure Web Mail Client 7.0.0 Software Product Guide Revision A McAfee Secure Web Mail Client 7.0.0 Software COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed,

More information

Product Guide. McAfee SaaS Endpoint Protection (October, 2012 release)

Product Guide. McAfee SaaS Endpoint Protection (October, 2012 release) Product Guide McAfee SaaS Endpoint Protection (October, 2012 release) COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active

More information

Product Guide. McAfee Security-as-a-Service Partner SecurityDashboard 5.2.0

Product Guide. McAfee Security-as-a-Service Partner SecurityDashboard 5.2.0 Product Guide McAfee Security-as-a-Service Partner SecurityDashboard 5.2.0 COPYRIGHT Copyright 2010 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed,

More information

Installation Guide. McAfee SaaS Endpoint Protection 6.0

Installation Guide. McAfee SaaS Endpoint Protection 6.0 Installation Guide McAfee SaaS Endpoint Protection 6.0 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

Installation Guide. McAfee SaaS Endpoint Protection

Installation Guide. McAfee SaaS Endpoint Protection Installation Guide McAfee SaaS Endpoint Protection COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

Installation Guide. McAfee epolicy Orchestrator 5.0.0 Software

Installation Guide. McAfee epolicy Orchestrator 5.0.0 Software Installation Guide McAfee epolicy Orchestrator 5.0.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

Quick Start Guide. McAfee Product Improvement Program 1.1.0

Quick Start Guide. McAfee Product Improvement Program 1.1.0 Quick Start Guide McAfee Product Improvement Program 1.1.0 COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

Product Guide Revision A. McAfee Secure Web Mail Client 7.0.0 Software

Product Guide Revision A. McAfee Secure Web Mail Client 7.0.0 Software Product Guide Revision A McAfee Secure Web Mail Client 7.0.0 Software COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed,

More information

epolicy Orchestrator Log Files

epolicy Orchestrator Log Files Reference Guide epolicy Orchestrator Log Files For use with epolicy Orchestrator 4.6.0 Software COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced,

More information

McAfee Client Proxy 1.2

McAfee Client Proxy 1.2 Product Guide Revision B McAfee Client Proxy 1.2 For use with epolicy Orchestrator 4.6 and 5.1 Software COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee,

More information

McAfee VirusScan Enterprise for Linux 1.7.0 Software

McAfee VirusScan Enterprise for Linux 1.7.0 Software Configuration Guide McAfee VirusScan Enterprise for Linux 1.7.0 Software For use with epolicy Orchestrator 4.5.0 and 4.6.0 COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication

More information

Administration Guide Revision E. Account Management. For SaaS Email and Web Security

Administration Guide Revision E. Account Management. For SaaS Email and Web Security Administration Guide Revision E Account Management COPYRIGHT Copyright 2015 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766, www.intelsecurity.com TRADEMARK ATTRIBUTIONS

More information

McAfee Client Proxy 1.0.0 Software

McAfee Client Proxy 1.0.0 Software Product Guide McAfee Client Proxy 1.0.0 Software For use with epolicy Orchestrator 4.6 Software COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the

More information

McAfee VirusScan Enterprise for Linux 1.9.0

McAfee VirusScan Enterprise for Linux 1.9.0 Configuration Guide McAfee VirusScan Enterprise for Linux 1.9.0 For use with epolicy Orchestrator 4.5, 4.6 and 5.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK

More information

Installation Guide Revision B. McAfee epolicy Orchestrator 5.1.0 Software

Installation Guide Revision B. McAfee epolicy Orchestrator 5.1.0 Software Installation Guide Revision B McAfee epolicy Orchestrator 5.1.0 Software COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active

More information

McAfee EETech for Mac 6.2 User Guide

McAfee EETech for Mac 6.2 User Guide McAfee EETech for Mac 6.2 User Guide COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism, McAfee

More information

McAfee Enterprise Mobility Management 11.0 Software

McAfee Enterprise Mobility Management 11.0 Software Installation Guide McAfee Enterprise Mobility Management 11.0 Software For use with epolicy Orchestrator 4.6.5-5.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK

More information

Product Guide. McAfee Endpoint Protection for Mac 2.1.0

Product Guide. McAfee Endpoint Protection for Mac 2.1.0 Product Guide McAfee Endpoint Protection for Mac 2.1.0 COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

McAfee MOVE AntiVirus Multi-Platform 3.5.0

McAfee MOVE AntiVirus Multi-Platform 3.5.0 Product Guide McAfee MOVE AntiVirus Multi-Platform 3.5.0 For use with epolicy Orchestrator 4.6.7, 4.6.8, 5.1.0 Software COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

McAfee Endpoint Encryption for Files and Folders 4.2

McAfee Endpoint Encryption for Files and Folders 4.2 Product Guide McAfee Endpoint Encryption for Files and Folders 4.2 For use with epolicy Orchestrator 4.6 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

User Guide. FIPS Mode. For use with epolicy Orchestrator 4.6.x Software

User Guide. FIPS Mode. For use with epolicy Orchestrator 4.6.x Software User Guide FIPS Mode For use with epolicy Orchestrator 4.6.x Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active

More information

Desktop Release Notes. Desktop Release Notes 5.2.1

Desktop Release Notes. Desktop Release Notes 5.2.1 Desktop Release Notes Desktop Release Notes 5.2.1 COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval

More information

Integration Guide. McAfee Asset Manager. for use with epolicy Orchestrator 4.6

Integration Guide. McAfee Asset Manager. for use with epolicy Orchestrator 4.6 Integration Guide Manager for use with epolicy Orchestrator 4.6 COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

McAfee Client Proxy 2.1.2

McAfee Client Proxy 2.1.2 Product Guide Revision A McAfee Client Proxy 2.1.2 For use with McAfee epolicy Orchestrator COPYRIGHT Copyright 2016 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766,

More information

McAfee Cloud Identity Manager

McAfee Cloud Identity Manager Salesforce Cloud Connector Guide McAfee Cloud Identity Manager version 1.1 or later COPYRIGHT Copyright 2013 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted,

More information

Administrators Guide Revision A. McAfee Email Gateway 7.5.0 Appliances

Administrators Guide Revision A. McAfee Email Gateway 7.5.0 Appliances Administrators Guide Revision A McAfee Email Gateway 7.5.0 Appliances COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active

More information

Installation Guide. McAfee epolicy Orchestrator 5.3.0 Software

Installation Guide. McAfee epolicy Orchestrator 5.3.0 Software Installation Guide McAfee epolicy Orchestrator 5.3.0 Software COPYRIGHT Copyright 2014 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766, www.intelsecurity.com TRADEMARK

More information

VMware Identity Manager Administration

VMware Identity Manager Administration VMware Identity Manager Administration VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

Product Guide. McAfee Endpoint Security 10

Product Guide. McAfee Endpoint Security 10 Product Guide McAfee Endpoint Security 10 COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee DeepSAFE,

More information

Release Notes for McAfee epolicy Orchestrator 4.5

Release Notes for McAfee epolicy Orchestrator 4.5 Release Notes for McAfee epolicy Orchestrator 4.5 About this document New features Known Issues Installation, upgrade, and migration considerations Considerations when uninstalling epolicy Orchestrator

More information

Installing and Configuring vcloud Connector

Installing and Configuring vcloud Connector Installing and Configuring vcloud Connector vcloud Connector 2.7.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

Product Guide. McAfee epolicy Orchestrator 5.3.0 Software

Product Guide. McAfee epolicy Orchestrator 5.3.0 Software Product Guide McAfee epolicy Orchestrator 5.3.0 Software COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

Administration Guide. McAfee SaaS Email Archiving

Administration Guide. McAfee SaaS Email Archiving Administration Guide McAfee SaaS Email Archiving COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee AppPrism,

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

McAfee Cloud Identity Manager

McAfee Cloud Identity Manager NetSuite Cloud Connector Guide McAfee Cloud Identity Manager version 2.0 or later COPYRIGHT Copyright 2013 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted,

More information

Best Practices Revision A. McAfee Email Gateway 7.x Appliances

Best Practices Revision A. McAfee Email Gateway 7.x Appliances Best Practices Revision A McAfee Email Gateway 7.x Appliances COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

McAfee Client Proxy 2.0

McAfee Client Proxy 2.0 Product Guide Revision B McAfee Client Proxy 2.0 For use with McAfee epolicy Orchestrator COPYRIGHT Copyright 2015 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766, www.intelsecurity.com

More information

Product Guide. McAfee Endpoint Security for Mac Threat Prevention 10.1.0

Product Guide. McAfee Endpoint Security for Mac Threat Prevention 10.1.0 Product Guide McAfee Endpoint Security for Mac Threat Prevention 10.1.0 COPYRIGHT Copyright 2015 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766, www.intelsecurity.com

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

McAfee Enterprise Mobility Management 12.0 Software

McAfee Enterprise Mobility Management 12.0 Software Installation Guide McAfee Enterprise Mobility Management 12.0 Software For use with epolicy Orchestrator 4.6.7-5.1 Software COPYRIGHT Copyright 2014 McAfee, Inc. Do not copy without permission. TRADEMARK

More information

Installation Guide. McAfee SaaS Endpoint Protection 5.2.0

Installation Guide. McAfee SaaS Endpoint Protection 5.2.0 Installation Guide McAfee SaaS Endpoint Protection 5.2.0 COPYRIGHT Copyright 2010 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a

More information

McAfee Policy Auditor 6.2.0 software Installation Guide

McAfee Policy Auditor 6.2.0 software Installation Guide McAfee Policy Auditor 6.2.0 software Installation Guide COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

McAfee MOVE AntiVirus (Agentless) 3.6.0

McAfee MOVE AntiVirus (Agentless) 3.6.0 Product Guide McAfee MOVE AntiVirus (Agentless) 3.6.0 For use with McAfee epolicy Orchestrator COPYRIGHT Copyright 2015 McAfee, Inc., 2821 Mission College Boulevard, Santa Clara, CA 95054, 1.888.847.8766,

More information

Product Guide. McAfee epolicy Orchestrator 5.0.0 Software

Product Guide. McAfee epolicy Orchestrator 5.0.0 Software Product Guide McAfee epolicy Orchestrator 5.0.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014

DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014 DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014 Contents Overview... 2 System requirements:... 2 Before installing... 3 Download and installation... 3 Configure DESLock+ Enterprise Server...

More information

McAfee Cloud Identity Manager

McAfee Cloud Identity Manager SAML2 Cloud Connector Guide McAfee Cloud Identity Manager version 1.2 or later COPYRIGHT Copyright 2013 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed,

More information

Installation Guide Revision B. McAfee Email Gateway 7.x Virtual Appliances

Installation Guide Revision B. McAfee Email Gateway 7.x Virtual Appliances Installation Guide Revision B McAfee Email Gateway 7.x Virtual Appliances COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active

More information

Copyright 2012 Trend Micro Incorporated. All rights reserved.

Copyright 2012 Trend Micro Incorporated. All rights reserved. Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

Senior Systems Cloud Services

Senior Systems Cloud Services Senior Systems Cloud Services In this guide... Senior Systems Cloud Services 1 Cloud Services User Guide 2 Working In Your Cloud Environment 3 Cloud Profile Management Tool 6 How To Save Files 8 How To

More information

Installation Guide. McAfee epolicy Orchestrator 4.6.0 Software

Installation Guide. McAfee epolicy Orchestrator 4.6.0 Software Installation Guide McAfee epolicy Orchestrator 4.6.0 Software COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored

More information

WhatsUp Gold v16.1 Installation and Configuration Guide

WhatsUp Gold v16.1 Installation and Configuration Guide WhatsUp Gold v16.1 Installation and Configuration Guide Contents Installing and Configuring Ipswitch WhatsUp Gold v16.1 using WhatsUp Setup Installing WhatsUp Gold using WhatsUp Setup... 1 Security guidelines

More information

SonicWALL SSL VPN 3.5: Virtual Assist

SonicWALL SSL VPN 3.5: Virtual Assist SonicWALL SSL VPN 3.5: Virtual Assist Document Scope This document describes how to use the SonicWALL Virtual Assist add-on for SonicWALL SSL VPN security appliances. This document contains the following

More information

SC-T35/SC-T45/SC-T46/SC-T47 ViewSonic Device Manager User Guide

SC-T35/SC-T45/SC-T46/SC-T47 ViewSonic Device Manager User Guide SC-T35/SC-T45/SC-T46/SC-T47 ViewSonic Device Manager User Guide Copyright and Trademark Statements 2014 ViewSonic Computer Corp. All rights reserved. This document contains proprietary information that

More information

McAfee Email Gateway 7.x Encryption and IronPort Integration Guide

McAfee Email Gateway 7.x Encryption and IronPort Integration Guide Sample deployment architecture For this guide, we have provided a deployment architecture example. This example includes an IronPort Email Gateway sending outbound email, and the McAfee Email Gateway Encryption

More information

http://www.trendmicro.com/download

http://www.trendmicro.com/download Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

MultiSite Manager. User Guide

MultiSite Manager. User Guide MultiSite Manager User Guide Contents 1. Getting Started... 2 Opening the MultiSite Manager... 2 Navigating MultiSite Manager... 2 2. The All Sites tabs... 3 All Sites... 3 Reports... 4 Licenses... 5 3.

More information

Archive Add-in Administrator Guide

Archive Add-in Administrator Guide Archive Add-in Administrator Guide RESTRICTION ON USE, PUBLICATION, OR DISCLOSURE OF PROPRIETARY INFORMATION Copyright 2011 McAfee, Inc. This document contains information that is proprietary and confidential

More information

McAfee Endpoint Encryption 7.0

McAfee Endpoint Encryption 7.0 Product Guide McAfee Endpoint Encryption 7.0 For use with epolicy Orchestrator 4.6 Software COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee

More information

Setting up Microsoft Office 365

Setting up Microsoft Office 365 Integration Guide Revision G McAfee SaaS Email Protection Securing Exchange Online in Microsoft Office 365 Setting up Microsoft Office 365 Use this guide to configure Microsoft Office 365 and Microsoft

More information

Backup & Disaster Recovery Appliance User Guide

Backup & Disaster Recovery Appliance User Guide Built on the Intel Hybrid Cloud Platform Backup & Disaster Recovery Appliance User Guide Order Number: G68664-001 Rev 1.0 June 22, 2012 Contents Registering the BDR Appliance... 4 Step 1: Register the

More information

User Manual. Onsight Management Suite Version 5.1. Another Innovation by Librestream

User Manual. Onsight Management Suite Version 5.1. Another Innovation by Librestream User Manual Onsight Management Suite Version 5.1 Another Innovation by Librestream Doc #: 400075-06 May 2012 Information in this document is subject to change without notice. Reproduction in any manner

More information

WhatsUp Gold v16.2 Installation and Configuration Guide

WhatsUp Gold v16.2 Installation and Configuration Guide WhatsUp Gold v16.2 Installation and Configuration Guide Contents Installing and Configuring Ipswitch WhatsUp Gold v16.2 using WhatsUp Setup Installing WhatsUp Gold using WhatsUp Setup... 1 Security guidelines

More information

OneLogin Integration User Guide

OneLogin Integration User Guide OneLogin Integration User Guide Table of Contents OneLogin Account Setup... 2 Create Account with OneLogin... 2 Setup Application with OneLogin... 2 Setup Required in OneLogin: SSO and AD Connector...

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android with TouchDown 1 Table

More information

http://docs.trendmicro.com/en-us/smb/hosted-email-security.aspx

http://docs.trendmicro.com/en-us/smb/hosted-email-security.aspx Trend Micro Incorporated reserves the right to make changes to this document and to the product described herein without notice. Before installing and using the product, review the readme files, release

More information

About Email Archiving for Microsoft Exchange Server

About Email Archiving for Microsoft Exchange Server Setup Guide Revision A McAfee SaaS Email Archiving Service Configuring Microsoft Exchange Server 2013 About Email Archiving for Microsoft Exchange Server The McAfee SaaS Email Archiving service stores

More information

Migration Guide Revision A. McAfee Email and Web Security 5.6 - McAfee Web Gateway 7.x

Migration Guide Revision A. McAfee Email and Web Security 5.6 - McAfee Web Gateway 7.x Migration Guide Revision A McAfee Email and Web Security 5.6 - McAfee Web Gateway 7.x COPYRIGHT Copyright 2012 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo,

More information

UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab

UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab Description The Symantec App Center platform continues to expand it s offering with new enhanced support for native agent based device management

More information

Setting up Microsoft Office 365

Setting up Microsoft Office 365 Setup Guide Revision F Using McAfee SaaS Email Protection to Secure Exchange Online in Microsoft Office 365 Setting up Microsoft Office 365 Use this guide to configure Microsoft Office 365 and Microsoft

More information

Administration Guide Revision A. SaaS Email Protection

Administration Guide Revision A. SaaS Email Protection Administration Guide Revision A SaaS Email Protection COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection, McAfee

More information

Citrix Access Gateway Plug-in for Windows User Guide

Citrix Access Gateway Plug-in for Windows User Guide Citrix Access Gateway Plug-in for Windows User Guide Access Gateway 9.2, Enterprise Edition Copyright and Trademark Notice Use of the product documented in this guide is subject to your prior acceptance

More information

Hardware Sizing and Bandwidth Usage Guide. McAfee epolicy Orchestrator 4.6.0 Software

Hardware Sizing and Bandwidth Usage Guide. McAfee epolicy Orchestrator 4.6.0 Software Hardware Sizing and Bandwidth Usage Guide McAfee epolicy Orchestrator 4.6.0 Software COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted,

More information

McAfee Host Data Loss Prevention 9.1 Cluster Installation Guide

McAfee Host Data Loss Prevention 9.1 Cluster Installation Guide McAfee Host Data Loss Prevention 9.1 Cluster Installation Guide COPYRIGHT Copyright 2011 McAfee, Inc. All Rights Reserved. No part of this publication may be reproduced, transmitted, transcribed, stored

More information

File Share Navigator Online 1

File Share Navigator Online 1 File Share Navigator Online 1 User Guide Service Pack 3 Issued November 2015 Table of Contents What s New in this Guide... 4 About File Share Navigator Online... 5 Components of File Share Navigator Online...

More information

Configuring HP Integrated Lights-Out 3 with Microsoft Active Directory

Configuring HP Integrated Lights-Out 3 with Microsoft Active Directory Configuring HP Integrated Lights-Out 3 with Microsoft Active Directory HOWTO, 2 nd edition Introduction... 2 Integration using the Lights-Out Migration Utility... 2 Integration using the ilo web interface...

More information

Installing and Configuring vcloud Connector

Installing and Configuring vcloud Connector Installing and Configuring vcloud Connector vcloud Connector 2.0.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

Product Guide Revision A. McAfee Data Loss Prevention Endpoint 9.3.0

Product Guide Revision A. McAfee Data Loss Prevention Endpoint 9.3.0 Product Guide Revision A McAfee Data Loss Prevention Endpoint 9.3.0 COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS McAfee, the McAfee logo, McAfee Active Protection,

More information

NotifyMDM Device Application User Guide Installation and Configuration for Windows Mobile 6 Devices

NotifyMDM Device Application User Guide Installation and Configuration for Windows Mobile 6 Devices NotifyMDM Device Application User Guide Installation and Configuration for Windows Mobile 6 Devices End-of-Life Notice Please note that GO!Enterprise MDM server version 3.6.3 is the last to officially

More information