Release Notes
McAfee Risk Advisor 2.6.2 Software For use with ePolicy
Orchestrator 4.5.0 and 4.6.0 Software
• About this document • New features
• System Requirements • Supported Upgrades
• Installing and verifying the extension • Resolved issues
• Known issues
• Finding product documentation
About this document
Thank you for choosing McAfee ® Risk Advisor ™ 2.6.2. This document contains important information about this release. We strongly recommend that you read the entire document.
Caution McAfee strongly recommends that you use any pre-release software (Beta or Evaluation build) in a test environment only. Pre-release software should not be installed in a production environment. We do not support automatic upgrading of an earlier version to a pre-release version of the software.
New features
New and updated features in the current release of the software are described below:
Feature Description
Ability to query application inventory
McAfee Risk Advisor users can query application inventory using the following pre-defined queries:
• In Application Inventory query group:
◦
Inventory of All Applications — Query for the existence of selected applications across all assets.◦
Inventory of Applications on each Asset — Query for ALL or selected applications from an Asset.◦
Top 10 Applications on Desktop — Query for the top 10 most prevalent applications found on all desktops.◦
Top 10 Applications on Server — Query for the top 10 most prevalent applications found on all servers.• In Risk Advisor query group:
◦
MRA: Top 10 Prevalent Applications across Threats — Query for the top 10 most prevalent applications across threats.Quick Search in Vulnerability Centric View
McAfee Risk Advisor users can search for specific vulnerabilities using the filters such as Vulnerability, Description, CVE References, Threat Name, and Threat Vendor fields.
the analytics subsequent runs. For details about performance improvement in this release, refer to the MRA 2.6.2 Database Sizing and Resource Usage Guide.
Backward compatibility with the McAfee Application Inventory plug-in for McAfee Risk Advisor 2.6.1
McAfee Risk Advisor 2.6.2 server supports the systems with McAfee Risk Advisor 2.6.1 Application Inventory plug-in.
System Requirements
This release supports a full installation of the product as well as an upgrade from McAfee Risk Advisor 2.6.x. Supported McAfee ePolicy Orchestrator version(s):
• ePolicy Orchestrator 4.5 • ePolicy Orchestrator 4.6 Supported Database:
• Microsoft SQL 2005 and above
Caution McAfee Risk Advisor may not function properly if Microsoft SQL 2005 is running in SQL 2000 Compatibility Mode. Any customization to the Microsoft SQL Server installation should follow the best practice guidelines provided by the database vendor.
Note
◦
McAfee Risk Advisor does not support the use of SQL Express.◦
SQL Server's Full Text Search service must be running prior to theupgrade and ePolicy Orchestrator database user should have permission to use the service. The Full Text Search service is used in Application Data Reconciliation.
Rollup reporting requirements
The versions of the master and slaves need to be same. This is consistent to the ePolicy Orchestrator Rollup reporting functionality. Hence, the following ePolicy Orchestrator master slave combinations are supported:
• Master — 4.6.x, Slaves — 4.5.x • Master — 4.6.x, Slaves — 4.6.x • Master — 4.5.x, Slaves — 4.5.x
The following McAfee Risk Advisor versions are supported:
• Master — 2.6.x, Slaves — 2.6.x Disk Space Requirements
McAfee Risk Advisor requires a minimum of 4 GB free disk space on the database where McAfee Risk Advisor files are to be stored.
Note The required disk space also depends upon the number of assets being managed by ePolicy Orchestrator server. For database sizing guidelines, refer to the MRA 2.6.2
Supported Upgrades
You can upgrade to McAfee Risk Advisor 2.6.2 from the following versions:
• McAfee Risk Advisor 2.6.0 • McAfee Risk Advisor 2.6.1
Installing and verifying the extension
Task
1 Close the ePolicy Orchestrator console.
2 Run the installation program for McAfee Risk Advisor, Setup.exe.
3 In the Setup Requirements screen, verify that the message All required applications were found appears, then click Next.
If this message does not appear, cancel the installation and install the applications specified, then run the McAfee Risk Advisor installation program again.
4 In the Welcome screen, click Next to continue.
5 From the drop-down lists, select a license type and the location where the product will be used. 6 Select I accept the terms in the license agreement, then click OK.
7 If this is an upgrade, skip to the next step. Otherwise, the Choose Destination Folder screen appears. Accept the default location or browse to another location, then click Next.
Note Make sure that no MRA task is running while doing an upgrade.
8 In the Set Administrator Information screen, provide the ePolicy Orchestrator global administrator user name and password, then click Next.
9 From the list that appears in the Set Optional Information screen, select the appropriate options and click Next. Options are:
• Products — Select the point-products from which you want McAfee Risk Advisor to import data, or click Select All for all
available point-product extensions.
• Risk Advisor Rollup Reporting extension for ePO — Select this for Rollup Reporting.
• Application Awareness — Select this to allow considering Application Inventory agent data during risk analysis.
Note Select all the point-products you want, even if you didn't select them during your previous installation. Data import extensions for the products that are not selected are uninstalled.
10 In the Start Copying Files screen, review your installation settings, then click Next to begin installation. 11 When the upgrade is complete, click Finish.
12 Verify that McAfee Risk Advisor is upgraded with all the features selected during installation.
• To verify that McAfee Risk Advisor was successfully upgraded, click Menu | Software | Extensions, select Risk Advisor from
the Extensions list, then verify that the version number is 2.6.2.
• Verify that the data import extensions selected during installation are available under Risk Advisor. For example, MRA Foundstone, MRA HIPS, MRA Network Security Manager, MRA Policy Auditor, MRA VSE, MRA Solidcore, MRA Rollup Reporting, and MRA Application Inventory.
• If application awareness was selected during installation, verify that —
◦
The Application Inventory extension is installed.◦
The McAfee Application Inventory package is installed under Menu | Software | Master Repository.Resolved issues
Here is a list of issues from previous releases of the software that have been fixed in this release. 1 Issue — MRA Rollup: Roll Up Risk Advisor Data task fails intermittently on ePolicy Orchestrator 4.6. 2 Issue — NSM countermeasure declaration doesn't happen automatically from NSM alerts data.
Known issues
Here is a list of known issues in this release of the software.
1 Issue — McAfee Risk Advisor installation fails when ePolicy Orchestrator and SQL server are configured with different database collations.
Workaround — Configure ePolicy Orchestrator and SQL Server to the same database collation, and then install McAfee Risk Advisor.
2 Issue — The results for Quick Find search using special characters are not retained when a user revists the results page. Workaround — Click Clear and perform the search again.
3 Issue — The install log files/folders are still mentioned as MRA 260.
Finding product documentation
Finding product documentation
McAfee provides the information you need during each phase of product implementation, from installing to using and
troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase.
Task
1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com. 2 Under Self Service, access the type of information you need:
To access user documentation To access the KnowledgeBase 1 Click Product Documentation.
2 Select a Product, then select a Version. 3 Select a product document.
• Click Search the KnowledgeBase for answers to your product questions. • Click Browse the KnowledgeBase for articles listed by product and version.
COPYRIGHT
Copyright © 2011 McAfee, Inc. All Rights Reserved.
No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of McAfee, Inc., or its suppliers or affiliate companies.
TRADEMARK ATTRIBUTIONS
LICENSE INFORMATION License Agreement
