
• Policy deployment
• Event collection
• Distributing all updates and software
Example 2 — Medium organization with four offices
The medium organization example has approximately 15,000 to 20,000 nodes. It has one data center
in New York where all traffic destined for the Internet must be routed. There are four offices in the
U.S. located in New York, San Francisco, Dallas, and Orlando. Each office has approximately 3,000 to
4,000 nodes with a T1 connection back to the New York office.
the McAfee ePO server, located in New York, manages all 20,000 nodes for policies and events for
Endpoint Encryption, VirusScan Enterprise, Host Intrusion Prevention System, and Application Control.
A dedicated SuperAgent repository is placed in each of the three major offices that connect to the data
center. These repositories are dedicated SuperAgent repositories that connect to the New York data
center with medium hardware class servers, for example a single processor 3 Ghz CPU and 4 GB of
RAM. Their only job is to serve out files to the McAfee Agents at each office.
Example 3 — Medium to Large Organization with Multiple Global offices
The medium-to-large organization example has 40,000 to 60,000 nodes distributed across three
major regions.
The U.S. offices have one data center in New York and three additional offices across the country. Each
office has approximately 7,000 nodes.
The EMEA offices have another data center in the UK with several other offices across EMEA. These
other offices range from 200 nodes 3,000 nodes. The one ePO server resides in the UK data center
and runs VirusScan Enterprise, Host Intrusion Prevention System, and SiteAdvisor.
The APAC offices include two smaller offices.
Region Office Number of nodes Servers
U.S. New York, Data Center 7,000 Repository
U.S. Office 1 5,000 Repository
U.S. Office 2 6,000 Repository
U.S. Office 3 5,000 Repository
EMEA U.K., Data Center 3,000 McAfee ePO server
EMEA Office 1 200
EMEA Office 2 1,000 Repository
EMEA Office 3 3,000 Repository
APAC Office 1 500
APAC Office 2 300
U.S. region servers
Put one server class client, for example dual processor 3 Ghz and 8 GB of RAM, at each site in the U.S.
EMEA region servers
Use the Systems Management Server (SMS) and install SuperAgents at each office in the EMEA since
they are smaller sites. Your repository does not have to be dedicated to McAfee as long as it's not
serving files to several thousand agents.
Using distributed repositories to keep your security software up to date
How many repositories do you need
3
McAfee
®
ePolicy Orchestrator
®
Best Practices Guide for use with ePolicy Orchestrator versions 4.5.0 and 4.0.0
27
Komentarze do niniejszej Instrukcji