Hampshire IT

Centrally Managed Virus Protection Service



Mcafee 8.8 P2/P3 Deployment Update

As part of on-going support and maintenance of the Centrally Managed Antivirus Service (EPO), HCC will commence the release of Mcafee VirusScan Enterprise 8.8 P2/P3 on Friday 6 December. This will be a phased rollout and will take a few weeks to complete in all subscribing schools.

The upgrade will happen automatically and there should be no user interaction required by school. Desktops, Laptops and Servers will update once they have been plugged into the network for a period of time. The update has been piloted in several schools and will be rolled out in a phased process over the period of 2/3 weeks in December.

The McAfee VirusScan Enterprise 8.8 Software is used by desktops, laptops and servers to detect and clean virus’s from the Operating System. McAfee 8.8 also offers improved spyware protection.

Mcafee Agent 8.8 Patch Compatibility

The upgrade will be monitored closely by HCC to ensure that machines are accepting the update and there are no issues.

McAfee 4.8 Patch1 Update

As part of our ongoing support and maintenance of the Centrally Managed Antivirus Service (EPO), Hampshire IT will be releasing McAfee Agent 4.8 Patch 1 to all connected machines in the county. The upgrade will be seamless and will not interrupt operation of any school systems. It is only available to schools who subscribe to the Anti Virus component of the SLA.

The McAfee Agent is the software used by desktops, laptops and severs to communicate with the central system in Winchester.


There are several points to note:

McAfee Agent 4.8 Patch 1 Supported Operating Systems

  • Windows XP SP 3

  • Windows 7SP1

  • Windows 8

  • Windows Server 2003 SP2

  • Windows Server 2008 Server SP2

  • Windows Server 2012


Systems already connected to Hampshire IT McAfee EPO

Systems with a working installation of a McAfee Agent that is communicating with the EPO Servers here will receive McAfee Agent 4.8 Agent automatically.


EdICTNet and HSS networks

Any new systems built after the initial deployment of McAfee 4.8 Patch 1, will always have a base level of the McAfee Agent installed on them; this will update automatically on successful connection to the systems at Winchester to McAfee Agent 4.8 Patch 1.


Third party networks

Any new systems on a third party network or indeed a brand new third party network will need a McAfee Agent installed on them either manually or via your network provider's chosen deployment method (eg.Group Policy).

In the case of Windows XP, Windows 7, Server 2003 or Server 2008 systems the current McAfee Agent MSI (v4.5) which is in circulation will be adequate for installation. Once installed it will automatically update to McAfee Agent 4.8 when it communicates with the EPO system here.


Server 2012 and Windows 8

Please note that network providers using Windows 8 or Server 2012 will need to contact Hampshire IT to obtain installation files to upgrade the system directly to McAfee Agent 4.8. McAfee Agents versions below 4.8 will not work correctly. We will also need to arrange a manual deployment of McAfee 8.8 to these machines; automated deployment will follow in the few months.



About Centrally Managed Virus Protection


Centrally Managed Virus Protection is an automated service providing updates for McAfee AV software for schools subscribing to the anti virus element of the Hampshire IT SLA and who are connected to HPSN SWAN.

The majority of Hampshire schools purchase the McAfee virus scan licence via the Hampshire IT SLA and are responsible for ensuring they remain current with relevant McAfee software updates. Rolling out upgrades can be time consuming and disruptive, and schools therefore have the option of using the centrally managed service to automate and simplify deployment.

To participate schools must subscribe to the virus protection element of the Hampshire IT SLA and be connected to SWAN/HPSN2.

mcafee-epo

How does ePO work?

The service is delivered using McAfee ePO (Electronic Policy Orchestrator), the diagram shows how this has been implemented in Hampshire. By using this model, we achieve the following benefits:
  • Schools McAfee virus protection software (engine and signature files) is kept fully up to date.
  • Fully automated service.
  • Significantly reduced risk of virus infection in schools.
  • Hampshire IT and nominated school contact are automatically alerted in the event of any virus activity.
  • Consistent with the corporate Hampshire County Council virus protection services.
  • Completely secure within the SWAN/HPSN2 environment.
  • No training required for the standard service.
  • Provides Hampshire IT with real time technical information about the school IT infrastructure (eg, OS and service pack version, free hard disk space, memory size, etc) necessary for support and major project rollout purposes. Please note: Hampshire IT will have no access to any school data.

Impact for schools

Initial setup

We can automate the initial ePO set-up process for schools with networks supplied by Hampshire IT, but this isn’t possible for schools running third party networks. Instead, we can provide you with a free of charge MSI (Microsoft Installer)  for you to install the relevant McAfee agents across your network. You can also arrange with your network supplier to install them, who might charge for this work.

McAfee tray icon

After ePO has been set up, schools are responsible for making sure that the McAfee software remains installed on all connected client machines, following these instructions. If your McAfee icon is missing from any client computer following migration to ePO, then it has not installed properly and you should contact the IT Help Desk immediately.

Ongoing McAfee Updates (engine and signature files)

Once the relevant McAfee agents are installed across the school network all approved software updates will install automatically.

Adding new network clients

We have configured EdICTNet to automatically install the relevant McAfee agent onto any new machines added to the network. However, this is not possible for third party networks. You will need to arrange deployment of the agent to all new client machines (via MSI) or arrange with your local supplier to do this for you. Your supplier may charge for this work.

Replacement network

Please contact the IT Help Desk if you are having a replacement local area network installed by a third party supplier but you still require Hampshire IT to provide automatic McAfee anti virus monitoring and updates. Regardless of whether you currently subscribe to this centrally managed service we will still need to configure your server as a Superagent and provide you with the latest McAfee agent. If you are having an EdICTNet installed, there is no need to do anything; this will all be taken care of for you as part of the installation service.

Service charges

The ePO service charge is included in the McAfee Virus Scan option in the Hampshire IT SLA and there are no additional charges for the service, which includes:

  • Initial connection to new automated service (as already indicated above, third party network schools may need assistance from their local supplier).
  • Auto deployment of Hampshire IT approved McAfee software updates.
  • Any virus related help call (from SLA).
  • Adding a school specific exception (i.e. file which should not be auto scanned for viruses).
  • Setting up virus email notifications for nominated school contacts.

Hampshire IT reserves the right to charge at £75 per hour for any additional requirements such as:

  • Local management of the ePO console and associated training.
  • Amending standard ePO policies/rules.
  • Running/setting up reports for individual schools.

(Additional requirements are unlikely to exceed one hour.)

Hampshire IT responsibilities

  • Assistance with the initial connection to ePO.
  • Ongoing monitoring of ePO.
  • Provide early communication of any version updates etc.
  • Assistance in clearing a virus outbreaks should one occur.

School responsibilities

  • We would suggest that schools do regular spot checks as a ‘belt and braces’ approach to ensuring machines are kept up to date with the latest virus definitions etc, and report any machines that appear to be out of date to the IT Help Desk.

Next steps

Please complete this form if you would like to sign up to use ePO.

Further information:

ePO FAQ page

McAfee website


 

Contact us

For urgent issues, call the IT Help Desk on 01962 847007. For anything else, see our contact page.