Release Notes

McAfee Deep Defender 1.6.0

For use with ePolicy Orchestrator 4.6.x-5.0.0 Software

About this release
New features
Installation instructions
Known issues
Find product documentation

About this release

This document contains important information about this release. We strongly recommend that you read the entire document.

ImportantWe do not support the automatic upgrade of a pre-release software version. To upgrade to a production release of the software, you must first uninstall the existing version. Make sure that you uninstall the existing McAfee Agent package, installed as part of the pre-release software version, from your client system before installing the latest McAfee Deep Defender software.

New features

This release of the product includes these new features.

New whitelist policies

Two new policies allow the administrator to add a list of approved hashes to their respective whitelists. The hash entries are used by the agent, when running a boot component integrity scan, to determine if the external hashes are in compliance with the approved hashes.

MBR Whitelist policy
BIOS Whitelist policy
New client task Configure Boot Component Integrity scan

The Boot Component Integrity scan task calculates and compares the boot component hash value to the whitelist policy and sends events to the McAfee ePO server.

These new queries have been added in this release:
BCIM Grouped By BIOS Hash BCIM Grouped By MBR Whitelist Status
BCIM Grouped By BIOS Version Deep Defender Compatibility Trending Report
BCIM Grouped By BIOS Whitelist Status Deep Defender Grouped Threat Events Report
BCIM Grouped By MBR Hash Deep Defender Protection Condition Report
BCIM Grouped By MBR Version Trend of Threat Events Grouped By Severity
Operating system support
Microsoft Windows 8, 32‑bit and 64‑bit
Microsoft Windows Server 2008, 64‑bit R2 (SP1 and Xeon only)
Processor support

Intel® Xeon® E3, E5, and E7 series processors

Installation instructions

For information about installing or upgrading McAfee Deep Defender, see McAfee Deep Defender1.6.0 Product Guide.

Important Before installing the latest McAfee Deep Defender software, you must uninstall the existing McAfee Agent package, installed as part of the pre-release software version, from your client system.

Overview

You can install and configure the software as a managed product or as a standalone product.

Managed product — Install the software using the McAfee ePO server.
Standalone product — Use the Setup utility to install the software, then synchronize the target systems with the ePolicy Orchestrator server to configure and manage McAfee Deep Defender.
NoteOn standalone systems, make sure that you use the Edit AutoUpdate Repository List option to retrieve the latest Content. For more details on how to edit the AutoUpdate Repository List, refer to McAfee KnowledgeBase article https://kc.mcafee.com/corporate/index?page=content&id=KB75352.

To install Deep Defender in Disabled mode, see the KB article https://kc.mcafee.com/corporate/index?page=content&id=KB75266.

Compatibility testing

McAfee provides a tool to determine which systems are compatible for installing McAfee Deep Defender. The tool can be run on managed systems or standalone systems.

Managed systems — If the system is connected to the McAfee ePO server, it sends its compatibility status to ePolicy Orchestrator through the McAfee Agent. The administrator runs the executable through the software deployment task in ePolicy Orchestrator.
Standalone systems — You must run the CompatibilityTester.exe application manually on each system, to test for the conditions required for McAfee Deep Defender compatibility. The return value of the application determines whether the tested system is compatible with McAfee Deep Defender.

Known issues

For a list of known issues in this product release, refer to McAfee KnowledgeBase article https://kc.mcafee.com/corporate/index?page=content&id=KB77860.

Find product documentation

McAfee provides the information you need during each phase of product implementation, from installation to daily use and troubleshooting. After a product is released, information about the product is entered into the McAfee online KnowledgeBase.

Task
1 Go to the McAfee Technical Support ServicePortal at http://mysupport.mcafee.com.
2 Under Self Service, access the type of information you need:
To access... Do this...
User documentation
1Click Product Documentation.
2Select a product, then select a version.
3Select a product document.
KnowledgeBase
Click Search the KnowledgeBase for answers to your product questions.
Click Browse the KnowledgeBase for articles listed by product and version.