Introduction to Reference Configurations
Reference configurations are McAfee-recommended deployment scenarios that have undergone extensive testing to ensure proper sequencing. The scenarios reduce the need for restarts and improve ease of execution. To access the reference configuration search tool, go to https://rcsearch.mcafee.com. The search tool allows you to filter reference configuration documents by product, installation type (fresh installation or upgrade), and Windows version.
For more details about reference configurations and answers to frequently asked questions, see KB88274 - Introduction to Reference Configurations.
This reference configuration document is designed for early adopter customers who want to deploy the latest release of McAfee products with specific operating systems to create a "gold image" for deployment. For these customers, this document describes a fresh install sequence.
NOTE: Not all McAfee products are included in this document. It represents products that are commonly used. If your product mix is a subset of this configuration, you can skip over any product deployment that does not apply to your needs. The recommended products in this reference configuration do not necessarily represent the latest released versions of many McAfee products.
Before You Begin
Before beginning the deployment process, there are several preparatory actions that help lead to a successful deployment process.
Review the latest release notes and known issues
Although McAfee officially recommends this reference configuration, we might discover issues that could impact the success of your deployment. See the Recommended Product Configuration table for links to known issues for each product version.
Plan for restarts
Some operating system driver modules installed during product upgrades are properly loaded into memory only at runtime, and thus need a restart to facilitate the loading of the new drivers. Limitations of the operating system require that only one version of these drivers be loaded at a time. So, depending on which products you are installing, you might need to restart multiple times. This deployment path has been optimized to minimize the number of restarts needed when you update all products listed in the sequence.
If you are planning to update only a subset of products, plan to restart after the updates are complete.
Recommended Product Configuration
The table below lists commonly deployed products, determined based on telemetry samplings from a large set of customers. McAfee recommends deploying these products to take advantage of the recent product offering for ENS 10.5.1. This configuration has been extensively tested for cross-product compatibility using Windows 10 Creators Update 64-bit Version 1703 (OS Build 15063.0 + ZDP KB 4016250). It assumes a clean system without any McAfee products previously installed.
| McAfee Products |
Product Versions (Client - Windows 10 version 1703) |
Known Issues |
| ePolicy Orchestrator (ePO) |
5.9.0.732 |
KB87673 |
| Data Exchange Layer Broker (DXL Broker) |
3.1.0.580
NOTE: This reference configuration was tested using DXL 3.x. This version became End of Life on April 10, 2019. |
Unpublished due to End of Life |
| Threat Intelligence Exchange Server (TIE Server) |
2.0.1.178 |
KB85172 |
| McAfee Active Response Server (MAR) |
2.0.1.164 |
KB88196 |
| McAfee Agent (MA) |
5.0.5.658 |
KB83895 |
| Endpoint Security (ENS) |
10.5.1.1034 |
KB82450 |
| Data Exchange Layer Client (DXL Client) |
3.1.0.580
NOTE: This reference configuration was tested using DXL 3.x. This version became End of Life on April 10, 2019. |
Unpublished due to End of Life |
| Adaptive Threat Protection (ATP) |
10.5.1.1149 |
KB88788 |
| Data Loss Prevention Endpoint (DLP Endpoint) |
10.0.230.82
NOTE: This reference configuration was tested using DLP Endpoint 10.x. This version became End of Life on October 31, 2019. |
Unpublished due to End of Life |
| Host Intrusion Prevention (Host IPS) |
8.0.0.4210 (Patch 9) |
KB89051 |
| McAfee Active Response Client (MAR) |
2.0.1.164 |
KB88196 |
| Management of Native Encryption (MNE) |
4.1.0.29 |
KB86057 |
| McAfee Application Control and Change Control (MACC) |
8.0.0.651 |
KB87839 |
Installation Process
This section outlines the recommended order of operation.
NOTES:
- Green boxes indicate Server systems.
- Boxes outlined in red indicate that a system restart is required to enable that product.
- Light blue boxes indicate a new product deployment.
