Configuring ePO Part 3/3

Posted: August, 11 2009

Server settings and the behaviors they control

Various settings control how the ePolicy Orchestrator server behaves. You can change most settings at anytime.

Types of ePO server settings are:

  • Dashboards — Specifies the default active dashboard that is assigned to new users’ accounts
    at the time of account creation, if one has been defined.
  • Detected System Compliance — Specifies the settings configured for Detected System Compliance. These settings affect how rogue systems in your network are identified and treated.
  • Detected System Matching — Specifies the settings used to match detected systems and system interfaces.
  • Email server — Specifies the email server that is used when ePolicy Orchestrator sends email messages.
  • Event Filtering — Specifies which events are forwarded by the agent.
  • Global Updating — Specifies whether and how global updating is enabled.
  • MyAvert Security Threats — Specifies proxy settings and the update frequency for the MyAvert Security Threats service.
  • OUI updating — Specifies how your OUI (Organizationally Unique Identifier) list is updated, and when the last update occurred.
  • Policy Maintenance — Specifies whether policies for unsupported products are visible or hidden.
  • Ports — Specifies the ports used by the server when communicating with agents and the database.
  • Printing and exporting — Specifies how information is exported to other formats, and the template for PDF exports.
  • Proxy Settings — Specifies the type of proxy settings configured for your ePO server.
  • Repository Packages — Specifies whether any package can be checked in to any branch.
  • Only agents later then version 3.6 can retrieve packages other than updates from branches other than Current.
  • Rogue Exception Categories — Specifies the categories that can be used to mark systems in your environment as exceptions.
  • Rogue System Sensor — Specifies the settings for Rogue System Sensors in your network.
  • Security Keys — Specifies and manages the agent-server secure communication keys, and repository keys.
  • Server Certificate — Specifies the server certificate your ePO server uses for HTTPS communication with browsers.
  • System Tree Sorting — Specifies whether and how System Tree sorting is enabled in your environment.
  • User Auto-Creation — Specifies whether ePO users are automatically created based on AD (Active Directory) user profiles upon login.
  • Windows Authentication — Specifies the domain name and AD servers configured
  • Windows Authorization — Specifies the domain name and Active Directory servers configured for use with this ePO server.

Security certificates

The browser used by ePO expects the server certificate setting to be a trusted certificate created
from suitable sources. If the server certificate configured is not a trusted source or a custom
created certificate, a warning message appears everytime ePO is launched. To stop this warning
mesage from appearing you must:
• Configure a trusted server certificate from a Certification Authority (CA).
• Create and configure a custom server certificate.
• Disable the server certificate setting.
The ePO browser expects the files linked to use the following format:
• Server certificate — PKCS7 or PEM
• Private key — PEM
NOTE: If the server certificate and private key are not saved as one of these formats, they must
be converted to the required format before they can be configured using Edit Server Certificate.

You may also be interested in: