Introduction to Reference Configurations

Reference configurations are deployment scenarios recommended by McAfee Enterprise that have undergone extensive testing to ensure proper sequencing. The scenarios reduce the need for restarts and improve ease of execution. Use the reference configuration report finder to find the scenario that you need. The report finder allows you to filter reference configuration documents by product, installation type (fresh installation or upgrade), and Windows version.

For more details about reference configurations and answers to frequently asked questions, see KB88274 - Introduction to Reference Configurations.

This reference configuration document is designed for customers who want to deploy the McAfee Enterprise products with specific operating systems to create a "gold image" for deployment. For these customers, this document describes a fresh install sequence. 

NOTE: Not all McAfee Enterprise products are included in this document. It represents products that are commonly used. If your product mix is a subset of this configuration, you can skip over any product deployment that does not apply to your needs. The recommended products in this reference configuration do not necessarily represent the latest released versions of many McAfee Enterprise products.

Before You Begin
Before beginning the deployment process, there are several preparatory actions that help lead to a successful deployment process.

Review the latest release notes and known issues 
Although McAfee Enterprise officially recommends this reference configuration, we might discover issues that could impact the success of your deployment. See the Recommended Product Configuration table for links to known issues for each product version. 

Plan for restarts 
Some operating system driver modules installed during product upgrades are properly loaded into memory only at runtime. As a result, they need a restart to facilitate the loading of the new drivers. Limitations of the operating system require that only one version of these drivers be loaded at a time. So, depending on which products you are installing, you might need to restart multiple times. This deployment path has been optimized to minimize the number of restarts needed when you update all products listed in the sequence.

If you are planning to update only a subset of products, plan to restart after the updates are complete.

Recommended Product Configuration
The table below lists commonly deployed products, determined based on telemetry samplings from a large set of customers. McAfee recommends deploying these products to take advantage of the product offering for ENS 10.7.0 February 2021 Update. This configuration has been extensively tested for cross-product compatibility using the list of operating systems below. It assumes a clean system without any McAfee products previously installed. 

Operating systems:

• Client operating systems:​
  • Windows 10 version 20H2 (October 2020 Update)
  • Windows 10 version 2004 (May 2020 Update)
  • Windows 10 version 1909 (November 2019 Update)
  • Windows 7 SP1
• Server operating systems:
  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2012 R2
  • ​Windows Server 2008 R2 SP1

McAfee Products	Recommended Versions	Known Issues
ePolicy Orchestrator (ePO)	5.10.0.2428 Apply Update 9 after the server setup	KB90382
Protection Workspace	Service extension: 1.0.0.1994 UI extension: 1.0.0.2320
Data Exchange Layer Broker (DXL Broker)	5.0.2.140	KB90991
Threat Intelligence Exchange Server (TIE Server)	3.0.1.119	KB91389
MVISION EDR Cloud	EDR Extension: 3.3.0.1 Cloud Bridge: 2.1.0.187 Configure to work with MVISION EDR Client
Web SaaS	Configure to work with McAfee Client Proxy
McAfee Agent (MA)	5.6.6.232	KB90993
Endpoint Security (ENS) ENS Platform ENS Threat Prevention ENS Firewall ENS Web Control Adaptive Threat Protection	10.7.0.2421 10.7.0.2522 10.7.0.1686 10.7.0.2080 10.7.0.2714	KB82450
McAfee Client Proxy (MCP)	3.2.0.189	KB83131
MVISION EDR Client	3.3.0.625	KB91275
Data Loss Prevention Endpoint (DLP Endpoint)	Extension: 11.5.0.41 Client: 11.5.0.60	KB89301
Drive Encryption (DE)	Extension: 7.2.8.4 Client: 7.2.8.4	KB84502
File and Removable Media Protection (FRP)1	5.2.0.151	KB85807
McAfee Application and Change Control (MACC)	Extension: 8.3.2.103 Client: 8.3.2.133	KB87838 KB87839

¹ FRP isn't supported on Server operating systems.

Installation Process
This section outlines the recommended order of operation.

NOTES:

• Check in all extensions into ePO before installing the products.
• Green boxes indicate server systems.
• Light blue boxes indicate a new product deployment.
• Boxes outlined in red indicate that a system restart is needed to enable that product.