EIEIOTECHNOVATION
← Training programmes

EIEIO / CYBERSECURITY

McAfee Endpoint Security 10.x Administration

Course outline

4 days

Duration

4 days

Overview

Our McAfee® Endpoint Security 10.x Administration course provides an in-depth introduction to the tasks crucial to set up and administer McAfee Endpoint Security.

McAfee Endpoint Security combines the multiple modules—Threat Prevention, Firewall, Web Control, and Adaptive Threat Protection—to help you take immediate action against potentially dangerous applications, downloads, websites, and files. This course combines lectures and practical lab exercises, with significant time allocated for hands-on interaction with the McAfee Endpoint Security user interface, as well as detailed instructions for the integration of this solution.

Audience

This course is intended for system and network administrators, security personnel, auditors, and/or consultants concerned with system endpoint security.

Agenda

Day 1

  • Welcome
  • Solution Overview
  • Planning the Deployment
  • McAfee® ePolicy Orchestrator® (McAfee ePO™) Server Overview
  • Installing McAfee Endpoint Security Software
  • Migrating Legacy Settings
  • Endpoint Upgrade Assistant
  • Deploying the Client Endpoints
  • Using the McAfee Endpoint Security Client
  • Policy Management Overview

Day 2

  • Configuring Common Settings
  • Threat Prevention: Configuring Access Protection
  • Threat Prevention: Exploit Prevention
  • Threat Prevention: Configuring the On-Access and OnDemand Scanners
  • Configuring Threat Prevention Options

Day 3

  • Firewall Overview and Configuring Firewall Options
  • Configuring Firewall Rules and Groups
  • Configuring Web Control
  • Monitoring and Reporting
  • Configuring Adaptive Threat Protection

Day 4

  • Data Exchange Layer Fundamentals
  • Configuring and Using Data Exchange Layer
  • McAfee® Threat Intelligence Exchange Fundamentals
  • Configuring and Using McAfee Threat Intelligence Exchange

Learning Objectives

Solution Overview

Describe the McAfee Endpoint Security solution, including key features, benefits, and enhancements within this latest release.

Planning the Deployment

Plan a McAfee Endpoint Security deployment, including business requirements, platform hardware, operating systems, and components included with the product.

McAfee ePO Server Overview

Log into the McAfee ePO server, and navigate through the interfaces to identify page controls, page types, and features.

Installing McAfee Endpoint Security Software

Obtain the required software components and perform the necessary procedures to add the software components to the McAfee ePO server and deploy the endpoint clients.

Migrating Legacy Settings

Use the Endpoint Migration Assistant to migrate policies and settings from legacy McAfee products to McAfee Endpoint Security, both manually and automatically.

Endpoint Upgrade Assistant

Use the Endpoint Upgrade Assistant perform upgrades from legacy McAfee products to McAfee Endpoint Security.

Deploying Client Endpoints

Deploy the endpoint clients and verify the success of the deployment.

Using the McAfee Endpoint Security Client

Open the McAfee Endpoint Security client and navigate the user interface to view and understand the default configurations and settings.

Policy Management Overview

Describe the purpose of McAfee ePO software polices and communicate about key terms and concepts.

Configuring Common Settings

Configure common settings that apply to all McAfee Endpoint Security modules and features, such as Client Interface, Language, Logging, Proxy server for McAfee Global Threat Intelligence reputation, and Update configuration.

Threat Prevention: Configuring Access Protection

Describe Threat Prevention Access Protection features and configure Access Protection settings to meet customer requirements.

Threat Prevention: Exploit Prevention

Identify Threat Prevention Exploit Prevention features and configure Exploit Prevention settings to meet customer requirements.

Threat Prevention: Configuring the On-Access and On-Demand Scanners

Describe Threat Prevention On-Access Scanner and OnDemand Scanner features and configure scan settings to

meet customer requirements.

Configuring Threat Prevention Options

Identify Quarantine Manager, Exclusions by Detection Name, and Potentially Unwanted Program (PUP) Detection features, and configure these feature settings to meet customer requirements.

Firewall Overview and Configuring Firewall Options

Describe Firewall features, communicate about key Firewall terms and concepts, and configure overall Firewall Options settings to meet customer requirements.

Configuring Firewall Rules and Groups

Identify the purpose of Firewall rules and groups and configure Firewall rules and groups to meet customer requirements.

Configuring Web Control

Describe Web Control features and configure Web Control settings to meet customer requirements.

Monitoring and Reporting

Monitor the solution using dashboards, queries, reports, and threat event detail.

Configuring Adaptive Threat Protection

Deploy the Adaptive Threat Protection module and configure Dynamic Application Containment (DAC) policies.

Data Exchange Layer Fundamentals

Describe the Data Exchange Layer solution and its key features.

Configuring and Using Data Exchange Layer

Identify and distinguish between the policies required for a Data Exchange Layer environment.

McAfee Threat Intelligence Exchange Fundamentals

Describe the McAfee Threat Intelligence Exchange solution and its key features.

Configuring and Using McAfee Threat Intelligence Exchange

Identify and distinguish between the policies required for a McAfee Threat Intelligence Exchange environment.

Programme scope, delivery arrangements and suitability are confirmed during enquiry.