Introduction to Reference Configurations
Reference configurations are deployment scenarios that we recommend, which have undergone extensive testing to ensure proper sequencing. The scenarios reduce the need for restarts and improve ease of execution. Use the reference configuration report finder to find the scenario that you need. The search tool allows you to filter reference configuration documents by product, installation type (fresh installation or upgrade), and Windows version.
For more details about reference configurations and answers to frequently asked questions, see KB88274 - Introduction to Reference Configurations.
This reference configuration document is designed for customers who want to deploy products with specific operating systems to create a "gold image" for deployment. For these customers, this document describes a fresh install sequence.
NOTE: Not all products are included in this document. It represents products that are commonly used. If your product mix is a subset of this configuration, you can skip over any product deployment that does not apply to your needs. The recommended products in this reference configuration don't necessarily represent the latest released versions of many products.
Before You Begin
Before beginning the deployment process, there are several preparatory actions that help lead to a successful deployment process.
Review the latest release notes and known issues
Although we officially recommend this reference configuration, we might discover issues that can impact the success of your deployment. See the "Recommended Product Configuration" table for links to known issues for each product version.
Plan for restarts
Some operating system driver modules installed during product upgrades are properly loaded into memory only at runtime. As a result, they need a restart to facilitate the loading of the new drivers. Limitations of the operating system require that only one version of these drivers be loaded at a time. So, depending on which products you're installing, you might need to restart multiple times. This deployment path has been optimized to minimize the number of restarts needed when you update all products listed in the sequence.
If you're planning to update only a subset of products, plan to restart after the updates are complete.
Configurazione del prodotto consigliataLa tabella seguente elenca i prodotti comunemente distribuiti, determinati in base a campionamenti di telemetria da un ampio insieme di clienti. Ti consigliamo di distribuire questi prodotti per sfruttare l'offerta di prodotti per l'aggiornamento di novembre 2021 di ENS 10.7.0. Questa configurazione è stata ampiamente testata per la compatibilità tra prodotti utilizzando l'elenco di sistemi operativi riportato di seguito. Presuppone un sistema pulito senza nessuno dei nostri prodotti precedentemente installato.
Sistema operativo:
Prodotto |
Versione consigliata |
Problemi noti |
ePolicy Orchestrator (ePO) |
5.10.0.2428
Applicare l'aggiornamento 9 dopo la configurazione del server |
KB90382 |
Area di lavoro di protezione |
Estensione del servizio: 1.0.0.1994 Estensione UI: 1.0.0.2320 |
- |
Broker del livello di scambio dati |
6.0.0.203 |
KB92077 |
Threat Intelligence Exchange Server |
3.0.1.119 |
KB91389 |
EDR Cloud |
Estensione EDR: 3.5.0.97 Cloud Bridge: 2.1.0.310 Configura per lavorare con EDR Client |
- |
Advanced Threat Defense |
4.14.0 |
KB89507 |
WebSaaS |
Configura per lavorare conSkyhigh Client Proxy (SCP) |
- |
McAfee Agent |
5.7.4.399 |
KB93773 |
ENS
- Piattaforma ENS
- ENS Prevenzione delle minacce
- Firewall Endpoint Security
- Controllo Web ENS
- Protezione adattiva dalle minacce
|
10.7.0.3199
10.7.0.3210
10.7.0.2100
10.7.0.2532
10.7.0.3252 |
KB82450 |
SCP |
4.3.0.236 |
KB83131 |
Cliente EDR |
3.5.2.1104 |
KB91275 |
Data Loss Prevention Endpoint |
Interno: 11.6.400.5 Cliente: 11.6.400.34 |
KB89301 |
Drive Encryption |
Interno: 7.3.0.183 Cliente: 7.3.0.183 |
KB84502 |
File and Removable Media Protection |
5.4.1.109 |
KB85807 |
Application e Change Control |
Interno: 8.3.4.124 Cliente: 8.3.4.225 |
KB87838
KB87839 |
Processo di installazioneQuesta sezione delinea l'ordine di funzionamento consigliato.
NOTE:
- Archiviare tutte le estensioni in ePO prima di installare i prodotti.
- Le caselle verdi indicano i sistemi server.
- Le caselle azzurre indicano l'implementazione di un nuovo prodotto.
- Le caselle delineate in rosso indicano che è necessario un riavvio del sistema per abilitare quel prodotto.