Introduction to Reference Configurations
Reference configurations are deployment scenarios that we recommend, which have undergone extensive testing to ensure proper sequencing. The scenarios reduce the need for restarts and improve ease of execution. Use the reference configuration report finder to find the scenario that you need. The search tool allows you to filter reference configuration documents by product, installation type (fresh installation or upgrade), and Windows version.
For more details about reference configurations and answers to frequently asked questions, see KB88274 - Introduction to Reference Configurations.
This reference configuration document is designed for customers who already have our products deployed. This document was created by building a baseline system matching the most commonly deployed versions of our products at that point in time, and then upgrading to recently released product versions. The intent is to provide a roadmap for upgrading to recent releases.
NOTE: Not all products are included in this document. It represents products that are commonly used. If your product mix is a subset of this configuration, you can skip over any product deployment that does not apply to your needs. The recommended products in this reference configuration don't necessarily represent the latest released versions of many products.
Before You Begin
Before beginning the deployment process, there are several preparatory actions that help lead to a successful deployment process.
Review the latest release notes and known issues
Although we officially recommend this reference configuration, we might discover issues that can impact the success of your deployment. See the "Recommended Product Configuration" table for links to known issues for each product version.
Plan for restarts
Some operating system driver modules installed during product upgrades are properly loaded into memory only at runtime. As a result, they need a restart to facilitate the loading of the new drivers. Limitations of the operating system require that only one version of these drivers be loaded at a time. So, depending on which products you're installing, you might need to restart multiple times. This deployment path has been optimized to minimize the number of restarts needed when you update all products listed in the sequence.
If you're planning to update only a subset of products, plan to restart after the updates are complete.
Adapt this guideline to your specific upgrade plan
Your current deployment baseline might differ from the versions mentioned in the "Recommended Product Configuration" table. If some of your product versions are more recent than this provided baseline, you can still follow the recommended sequence. If you don't use some of the products in the list, you can skip that product.
Configurazione del prodotto consigliata
Nella tabella riportata di seguito sono elencati i prodotti comunemente distribuiti, determinati in base ai campionamenti di telemetria provenienti da un'ampia gamma di clienti. Si consiglia di implementare questi prodotti per trarre vantaggio dalla recente offerta di prodotti per ENS 10.7.0. questa configurazione è stata ampiamente testata per la compatibilità tra i prodotti utilizzando l'elenco dei sistemi operativi seguenti:
Sistemi operativi:
- Upgrade1 per Windows 10 versione 20H2 (ottobre 2020 Update) da uno dei seguenti sistemi operativi:
- Windows 7 SP1
- Windows 10 versione 1809 (aggiornamento 2018 ottobre)
- Windows 10 versione 1903 (aggiornamento del 2019 maggio)
- Windows 10 versione 1909 (aggiornamento del 2019 novembre)
- Upgrade1 per Windows Server 2019 da uno dei seguenti sistemi operativi:
- Windows Server 2008 R2 SP1
- Windows Server 2012 R2
- Windows Server 2016
1 Per informazioni dettagliate sull'esecuzione dell'upgrade del sistema operativo, consultare gli articoli seguenti:
Prodotti |
Versioni In comune |
Versioni consigliate |
Problemi noti |
ePolicy Orchestrator (ePO) |
5.10.0.2428 Applicare l'aggiornamento 9 dopo il
configurazione del server |
|
KB90382 |
Area di lavoro di protezione |
|
Estensione del servizio: 1.0.0.1765
Estensione dell'interfaccia utente: 1.0.0.2070 |
|
Broker Data Exchange Layer |
6.0.0.203 |
|
KB92077 |
Threat Intelligence Exchange Server |
3.0.0.480 |
3.0.1.119 |
KB91389 |
MVISION EDR cloud |
|
Estensione EDR: 3.3.0.1
Cloud Bridge: 2.1.0.100
Configura per lavorare con
Client MVISION EDR |
|
Web SaaS |
|
Configura per lavorare con
McAfee Client Proxy |
|
McAfee Agent |
5.6.3.157 |
5.6.6.232 |
KB90993 |
ENS
- Piattaforma ENS
- ENS
Prevenzione delle minacce
- Firewall Endpoint Security
- Controllo Web ENS
- Protezione adattiva dalle minacce
|
10.7.0.1285
10.7.0.1415
10.7.0.945
10.7.0.1086
10.7.0.1531 |
10.7.0.2174
10.7.0.2298
10.7.0.1540
10.7.0.1891
10.7.0.2481 |
KB82450
|
McAfee Client Proxy |
3.1.0.215 |
3.2.0.189 |
KB83131 |
Client MVISION EDR |
|
3.3.0.625 |
KB91275 |
Data Loss Prevention Endpoint |
Estensione: 11.4.0.17
Client 11.4.0.452 |
Estensione: 11.6.0.27
Client 11.6.0.762 |
KB89301 |
Drive Encryption |
Estensione: 7.2.9.14
Client 7.2.9.14 |
Estensione: 7.2.10.56
Client 7.2.10.56 |
KB84502 |
File and Removable Media Protection (FRP)2 |
5.1.0.209 |
5.3.0.143 |
KB85807 |
Application and Change Control |
Estensione: 8.2.1.229
Client 8.2.1.435 |
Estensione: 8.3.2.103
Client 8.3.2.133 |
KB87838
KB87839 |
2 FRP non è supportato sui sistemi operativi server.
Processo di installazione:
Questa sezione descrive l'ordine di funzionamento consigliato.
NOTE:
- Archiviare tutte le estensioni in ePO prima di effettuare l'upgrade dei prodotti.
- Le caselle verdi indicano i sistemi server.
- Le caselle blu scuro indicano quando si consiglia di effettuare l'upgrade di un prodotto.
- Le caselle blu chiare indicano una nuova distribuzione del prodotto.
- Le caselle delineate in rosso indicano che è necessario riavviare il sistema per attivare tale prodotto.