The McAfee ePO integration provides McAfee ePO customers with a way to ensure that the ePO agent is installed comprehensively on all network devices in a particular segment (or multiple segments) as intended. The integration reconciles McAfee findings with Lumeta findings and insodoing, uncovers:
- Assets lacking the McAfee ePO agent
- Assets to which visibility is blocked
- Assets with comprehensive management
To manage e-policy in Lumeta, first configure the McAfee feed, then review the ePO Management dashboard, located on Lumeta's main Dashboards menu.
To manage e-policy in McAfee ePO server, configure the McAfee feed, then install the Lumeta extension to your ePO server.
The dashboard provides a variety of useful information:
Following is the ePO Management dashboard and a description of the data fields returned. All analytics from the McAfee feed go here. None affect Map filters, Reports or Search.
- IP Address - Device identifier
- MAC Address - Device identifier
- Active - device responded to Lumeta probe
- First Observed - Device came on the network
- Last Observed - Device left the network after this point
- ZoneID - Number corresponding to the zone to which the device belongs
IPs Unmanaged by BlueCat
IPs Lumeta found on your network that McAfee doesn't know about and doesn't have under management. Together, these unknowns represent a policy-management gap and vulnerability that could be exploited. This information is presented visually, in a bar chart that shows the volume of unmanaged, and also in a table with details on each unmanaged IP address (i.e., IP and MAC address, responsiveness and when the first and last response was received, and the Zone in which the device is located).
IPs Unmanaged by Lumeta
These are those IPs managed by McAfee that Lumeta BlueCat Management dashboard enables you to identify any IP address space that is missing from your BlueCat Address Management (BAM) server.
The dashboard provides these device attributes:
- Active - True/False status indicating whether the device responded to a Asset Manager probe
- Device Type - Descriptor of the device such as server, router, printer
- DNS Name - Name given to device by Domain Name System
- First Observed - Timestamp of when the device first responded to a probe from Asset Manager
- IP Address - The unique IPv4 or IPv6 device identifier
- Last Observed - Timestamp of when the device last responded to a probe from Asset Manager
- LocationCode - Indicates the country, city in UN/ LOCODE, and custom locations such as CA TOR OF1 indicates: CA= Canada TOR=Toronto OF1=Office 1.
- MAC Address - The unique device identifier
- OS - Operating system running on the device
- State - Categorizes IP address assignment permanence (e.g., static, DHCP-reserved, gateway)
- Zonename - Name of the zone in which the device was discovered
IPs Unmanaged by BlueCat
IP addresses that Asset Manager found on your network that BlueCat doesn't know about or manage.
IPs Unmanaged by Asset Manager
IP addresses managed by BlueCat that Asset Manager did not find on the network. Typically there will not be any devices managed by McAfee BlueCat that have not been indexed by Lumeta. In the event these widgets show results, check your your Lumeta discovery configuration, which is not providing the level of visibility you require. Contact Asset Manager. Records in this dashboard widget indicate a lack of visibility which could be caused by a discovery configuration or deployment problem. Please contact us for help in identifying the prospective source of the problem.
BlueCat and
...
Asset Manager Managed IPs
McAfee- and Lumeta-Managed IPs - When this subset becomes the whole (i.e., when all devices are managed by both resources), your organization's e- policy is well in hand.
Submit a comment at the bottom of this page if you have a question or need additional information about the BlueCat Management dashboard.