Introduction to Reference Configurations

Reference configurations are deployment scenarios that we recommend, which have undergone extensive testing to ensure proper sequencing. The scenarios reduce the need for restarts and improve ease of execution. To access the reference configuration report finder. The search tool allows you to filter reference configuration documents by product, installation type (fresh installation or upgrade), and Windows version.

For more details about reference configurations and answers to frequently asked questions, see KB88274 - Introduction to Reference Configurations.

This reference configuration document is designed for customers who already have our products deployed. This document was created by building a baseline system matching the most commonly deployed versions of our products at that point in time, and then upgrading to recently released product versions. The intent is to provide a roadmap for upgrading to recent releases. 

NOTE: Not all products are included in this document. It represents products that are commonly used. If your product mix is a subset of this configuration, you can skip over any product deployment that does not apply to your needs. The recommended products in this reference configuration do not necessarily represent the latest released versions of many products.
 
Before You Begin
Before beginning the deployment process, there are several preparatory actions that help lead to a successful deployment process.

Review the latest release notes and known issues 
Although we officially recommend this reference configuration, we might discover issues that could impact the success of your deployment. See the "Recommended Product Configuration" table for links to known issues for each product version. 

Plan for restarts 
Some operating system driver modules installed during product upgrades are properly loaded into memory only at runtime, and thus need a restart to facilitate the loading of the new drivers. Limitations of the operating system require that only one version of these drivers be loaded at a time. So, depending on which products you are installing, you might need to restart multiple times. This deployment path has been optimized to minimize the number of restarts needed when you update all products listed in the sequence.

If you are planning to update only a subset of products, plan to restart after the updates are complete.

Adapt this guideline to your specific upgrade plan 
Your current deployment baseline might differ from the versions mentioned in the "Recommended Product Configuration" table. If some of your product versions are more recent than this provided baseline, still follow the recommended sequence. If you do not use some of the products in the list, you can skip that product.

Recommended Product Configuration
The table below lists commonly deployed products, determined based on telemetry samplings from a large set of customers. We recommend deploying these products to take advantage of the recent product offering for ENS 10.7.0. This configuration is extensively tested for cross-product compatibility using the list of operating systems below:

Operating systems:

• Upgrade¹ to Windows 10 version 20H2 (October 2020 Update) from any of the following operating systems:
  • Windows 7 SP1
  • Windows 10 version 1809 (October 2018 Update)
  • Windows 10 version 1903 (May 2019 Update)
  • Windows 10 version 1909 (November 2019 Update)
  • Windows 10 version 2004 (May 2020 Update)
     
• Upgrade¹ to Windows Server 2019 from any of the following operating systems:
  • Windows Server 2008 R2 SP1
  • Windows Server 2012 R2
  • Windows Server 2016

¹ For details about performing the operating system upgrade, see the articles below:

• KB89000 - How to upgrade the operating system to Windows 10 with Drive Encryption 7.2.1 or later installed
• KB87550 - How to upgrade the operating system to Windows 10 with File and Removable Media Protection installed
• KB86551 - How to upgrade to Windows 10 with Application and Change Control deployed

 

Products	Common Versions	Recommended Versions	Known Issues
ePolicy Orchestrator (ePO)	5.9.1.251		KB87673
Protection Workspace		Service extension: 1.0.0.1765 UI extension: 1.0.0.2070
Data Exchange Layer Broker	6.0.0.203		KB92077
Threat Intelligence Exchange Server	3.0.0.480	3.0.1.119	KB91389
MVISION EDR Cloud		EDR Extension: 3.3.0.1 Cloud Bridge: 2.1.0.100 Configure to work with MVISION EDR Client
Web SaaS		Configure to work with McAfee Client Proxy (MCP)
McAfee Agent	5.6.1.157	5.6.6.232	KB90993
ENS ENS Platform ENS Threat Prevention ENS Firewall ENS Web Control Adaptive Threat Protection	10.7.0.1733 10.7.0.1751 10.7.0.1247 10.7.0.1519 10.7.0.1929	10.7.0.2174 10.7.0.2298 10.7.0.1540 10.7.0.1891 10.7.0.2481	KB82450
MCP	3.1.0.215	3.2.0.189	KB83131
MVISION EDR Client		3.3.0.625	KB91275
Data Loss Prevention Endpoint	Extension: 11.4.0.17 Client: 11.4.0.452	Extension: 11.6.0.27 Client: 11.6.0.762	KB89301
Drive Encryption	Extension: 7.2.8.4 Client: 7.2.8.4	Extension: 7.2.10.56 Client: 7.2.10.56	KB84502
File and Removable Media Protection (FRP)2	5.1.0.209	5.3.0.143	KB85807
Application and Change Control	Extension: 8.2.6.103 Client: 8.2.6.141	Extension: 8.3.2.103 Client: 8.3.2.133	KB87838 KB87839

² FRP isn't supported on Server operating systems.

Installation Process:
This section outlines the recommended order of operation.

NOTES:

• Check in all extensions to ePO before you upgrade the products.
• Green boxes indicate server systems.
• Dark blue boxes indicate when a product upgrade is recommended.
• Light blue boxes indicate a new product deployment.
• Boxes outlined in red indicate that a system restart is needed to enable that product.