McAfee ePO (File and Removable Media Protection)

Wondering if anyone has ePO (v5) running in their environment and has coded up (using BigFix) any retrieved properties/analysis’ that returns results similar to the status report within the ePO’s FRM feature. I’m specifically looking to report on removable devices that a writebale that havent been blocked, and more importantly whether the ePO policy has been applied succesfully.
Any help appreciated

Hi!

I dont have anything for FRM but I do have a general ePO analysis which should report on applied policies here: ePO Analysis on BigFix.Me ePO Analysis on GitHub.

Hope that helps!

1 Like

Great stuff.

So applying your code for configured policies, whats the best method for returning where configured policy name contains “name of policy” ?

if (not windows of operating system) then “N/A” else if exists service “masvc” AND exists (xml document of file “manifest.xml” of folder (value “DataPath” of keys “HKEY_LOCAL_MACHINE\Software\McAfee\Agent” of native registry as string)) then concatenation “||” of (node values of attributes “name” of it) of (/* Filter out only the assigned policies */ items 0 of (it whose (item 1 of it contains node value of attribute “id” of item 0 of it)) of (selects “/Manifest/PolicyRoot/Policies/Policy” of it, set of node values of attributes “id” of (selects “/Manifest/PolicyRoot/Assignments/Assignment” of it)) of (xml document of file “manifest.xml” of folder (value “DataPath” of keys “HKEY_LOCAL_MACHINE\Software\McAfee\Agent” of native registry as string))) else “N/A”

@strawgate

It appears McAfee have moved the manifest.xml out of the Program Files directory. You wouldn’t happen to have updated code to pull back configured policies ?

https://bigfix.me/relevance/details/3017389