McAfee ePO Endpoint Connectivity Diagnostics Playbook v2

Perform a check on ePO endpoints to see if any endpoints are unmanaged or lost connectivity with ePO and take steps to return to a valid state.

McAfee ePO · 12 tasks · 0 inputs · 0 outputs

Commands used

closeInvestigation

Flowchart

No Yes Yes No start_task start_task Are any endpoints in ePO listed as unmanaged? Are any endpoints in ePO ... Check if unmanaged endpoints are in special excluded list. Check if unmanaged endpoi... Open ServiceNow ticket for admin to install agents - ServiceNowCreateIncident Open ServiceNow ticket fo... ServiceNowCreateIncident Check if there are agents which haven't communicated with ePO in the past 3 days Check if there are agents... CloseInvestigation - closeInvestigation CloseInvestigation closeInvestigation Check connectivity for each endpoint using ping - Ping Check connectivity for ea... Ping Remotely check that McAfee Agent is installed and running. Remotely check that McAfe... Remotely execute cmdagent commandline utility to force communication with ePO. Remotely execute cmdagent... Retrieve McAfee Agent logs from non-communicating endpoints. Retrieve McAfee Agent log... Store a list of unmanaged endpoints to context key epoUnmanagedEndpoint - commentsToContext Store a list of unmanaged... commentsToContext Store non-communicating endpoints to context key epoNonCommunicatingEndpoint - commentsToContext Store non-communicating e... commentsToContext