Anti-virus Software for Staff & Postgrads

The information and instructions below only pertain to staff and postgrads in Trinity offices and labs and on the staff Wi-Fi network. If you are a student please visit the TCDconnect requirements for supported anti-virus solutions.

There are two pieces of software staff must install on their Windows PC or Mac to ensure their personal computers and the Trinity network are protected from virus outbreak.
They are: McAfee ePolicy Orchestrator (ePO) Agent & McAfee Endpoint Security.

Please go to the section for Windows PC or macOS, as applicable, and follow the instructions below to install both on your machine.

Windows PC

Before you begin

  1. Ensure that McAfee ePolicy Orchestrator (ePO) Agent & McAfee Endpoint Security are not already installed.
  • In Windows 7 and Windows 8 choose  Start - Control Panel and double-click on Programs & Features. In Windows 10 click Start and type 'Add or remove programs' and then select that option
  • Scroll through the list and check that McAfee Agent & McAfee Endpoint Security Platform are listed. If so, you already have these programmes and do not need to install further.
  1. Uninstall any other preinstalled anti-virus software.
  • In Windows 7 and Windows 8 choose Start - Control Panel and double-click on Programs & Features. In Windows 10 click Start and type 'Add or remove programs' and then select that option
  • From the list of applications select the appropriate application to remove and follow the instructions on screen. It is advisable to reboot your PC to allow complete uninstallation of the existing software.

Installing McAfee ePO Agent on Windows PC

McAfee ePolicy Orchestrator (ePO) Agent

IT Services makes use of an anti-virus management system called McAfee ePolicy Orchestrator which enables us to remotely monitor anti-virus software on client PCs. In the event of a virus outbreak we can force updates on client machines and identify infected machines.
A small ePO 'agent' file is installed on each client PC which reports back details to our ePolicy Server. The agent service runs silently and hidden in the background and has no negative performance effect on any other application. Computers connected to the Trinity data network which have the ePO agent installed can have their virus definitions and Endpoint Security engine automatically updated, and have a daily scan automatically scheduled.

You must be connected to the Trinity data network to process with these steps.

  1. Save your files and shut down any open programs.

  2. Launch the ' Run' dialog box by holding down the Windows key and hitting R, or by launching Run from the Start menu

  3. In the 'Run' dialog box, beside 'Open:' enter the following and click OK
    \\ntserver-usr\Virus\PC\McAfee\ePO Agent
    Or
    \\ntserver-usr.tcd.ie\Virus\PC\McAfee\ePO Agent

  4. Double click the FramePkg file and at the User Account Control window, Select Allow or Yes

  5. When the McAfee agent and Updater setup is complete click OK to 'Setup completed Successfully'

Installing McAfee Endpoint Security (ENS) 10.5 for Windows

Uninstalling Other Antivirus Software

  1. If you have any other security software installed on your computer, you must uninstall it first before installing ENS 10.5. Please follow the directions in “Before you Begin” to do this.

Manual Installation of Endpoint Security

  1. Install the ePO Agent, using the steps in the section above "Installing McAfee ePO Agent on Windows PC"

  2. Once the ePO Agent has been installed, and once your PC is connected to the College network, then McAfee ENS will be automatically installed within 15-30 minutes.

Endpoint Security Updates


The software is automatically configured to receive daily updates from a central server.

Run the Update Task

The Auto update task automatically checks for Anti-Malware and engine updates on a daily basis. When an emergency update is required, IT Services will push the new update to all networked machines.
To manually run the Auto Update task:

  1. In Windows 7 and Windows 10, Right click on the McAfee shield in the system tray and select McAfee Endpoint Security as illustrated to the right.
  1. Once the Endpoint Security interface opens click  button to update the security software

  2. When the update completes click Close.

 

Scan for Threats

A weekly Full Scan is configured to run every Thursday afternoon, the scan is managed by the McAfee ePO server and cannot be cancelled or modified.
ENS is continually running an ‘on access scan’ in the background.
If you wish to run a scan you access the ENS interface as outlined above.

Once you have accessed the interface click on  you will then be presented with the following options for Quick Scan or Full Scan

To scan external media (such as memory keys or external hard drives):

  1. Insert the external media
  2. Click Start - Computer
  3. Right click on the drive letter the media is connected to and click on ‘Scan for threats…’

 

macOS

Before you begin

  1. Ensure that McAfee ePolcy Orchestrator (ePO) Agent & McAfee Endpoint Security are not already installed.
  • To check this check the top right of the screen to see if there is a McAfee shield displayed as illustrated
  • mac sheild
  • If this is not displayed then neither the ePO agent or Endpoint Security is installed on your Mac
  1. Uninstall any other preinstalled anti-virus software.

Installing McAfee ePO Agent on macOS

McAfee ePolicy Orchestrator (ePO) Agent

IT Services makes use of an anti-virus management system called McAfee ePolicy Orchestrator which enables us to remotely monitor anti-virus software on client PCs. In the event of a virus outbreak we can force updates on client machines and identify infected machines.
A small ePO 'agent' file is installed on each client PC which reports back details to our ePolicy Server. The agent service runs silently and hidden in the background and has no negative performance effect on any other application. Computers connected to the Trinity data network which have the ePO agent installed can have their virus definitions and Endpoint Security engine automatically updated, and have a daily scan automatically scheduled.

You must be connected to the Trinity data network to process with these steps.

You must be connected to the Trinity data network (wired or Wi-Fi) to proceed with these steps.

  1. In Google Chrome open the following URL (this works best in Chrome as opposed to Safari): 

https://winepomgmt.college.tcd.ie:8443/ComputerMgmt/agentPackage.get?token=8fe28936f90962b5b759f954905c8ec50ae1c811

  1. You may receive a message regarding the security certificate being invalid - choose to continue past this message.
  2. macepo agent
  3. Click continue

  4. Next you will see the following screen

  1. Click install

  2.  

  3. Next check your Downloads folder

  4. mac epo download
  1. Double-click on the McAfee Install App. Enter your Mac admin password when prompted.

  2. The Agent Install Process will commence

 install run

  1. Install will complete with a message “Agent upgrade was successful” 

  2. epo sheild
  3. Within the next 15 minutes you will see the McAfee Shield
  1. This indicates that both the ePO agent and McAfee Endpoint Protection 2.3 is installed on your Mac

Problems Installing McAfee ePO Agent for Mac

When trying to open McAfee Agent for Mac.pkg you may receive an error ->
“McAfee Agent for Mac" can't be opened because it is from an unidentified developer
This error occurs because Gatekeeper options are set to "Mac App Store and identified developers".  GateKeeper options can be found in System Preferences - Security & Privacy - ‘General’ Tab.  If you are getting a security warning then the problem is that the package is not trusted.  There are a few methods to work around this.

  1. The simplest and easiest way is to control-click (or right-click) the downloaded app. Select Open from the top of contextual menu that appears.  On the ensuing dialogue box, choose ‘Open’ as well. Note that this will exempt this file from Gatekeeper.  Enter an Administrator username and password if prompted.
  2. Change setting to allow applications downloaded from Anywhere to be installed.  This is the least safe method, and is not normally recommended.  All downloaded apps will no longer be stopped or checked for authenticity by Gatekeeper.  This will allow you to run any downloaded piece of software (but will still warn you that you are opening a potentially unsafe program).

Once the application has started to install continue from Step 5 from the instructions above.
To get more details on GateKeeper please see the Apple support site below ->
http://support.apple.com/kb/ht5290

macOS Frequently Asked Questions

The FAQs below relate to McAfee Endpoint Protection for Mac version 2.1 that can be installed on macOS 10.7 and later

How do I check if the virus definitions are up to date?

  1. Launch McAfee Endpoint Protection for Mac Console via the red McAfee shield icon in the system tray at the top right of the screen.
  2. Select Update now from the list on the left hand side
  3. The current installed update details will be shown and the important items are the DAT Version and the DAT Creation Date

How do I manually update my Virus Definitions?

  1. Launch McAfee Endpoint Protection for Mac Console via the red McAfee shield icon in the system tray at the top right of the screen.
  2. Select Update now from the list on the left hand side.
  3. On the right select Start Update and when the Update in Progress is complete you can close the console.

Some Items have Yellow Exclamation signs in the Console Dashboard

McAfee Endpoint Protection for Mac that is used for College only enforces the Scanning functionality of the application.  This includes the On-Access Scan and the Spyware Scan.  In the Dashboard these items will have checkmarks beside them.  The two options not enforced are Application Protection and Desktop Firewall and these will have a Yellow Exclamation mark beside them when looking at the Dashboard.

When I check the Update Schedule the option is set to Never

When the McAfee ePO Agent for Mac (as per instructions above) is installed it manages the update schedule for McAfee Endpoint Protection for Mac.  To avoid the update running twice in one day the Agent disables the Update process and uses its own task to manage updates.

How do I uninstall McAfee ePO Agent for Mac?

  1. Switch to Finder and chose Go - Utilities from the main menu.  Double click on Terminal to open the Terminal window and run the command below
  2. sudo /library/mcafee/cma/uninstall.sh 

  3. bash
  4. When you hit enter you will be prompted for a password. This will be the local Mac administrator password. The administrator account is a standalone account for the Mac which you will have configured when first setting up the Mac, and is not related to your Trinity network login password. Note that the characters will not appear on screen as you are typing them in.

  5. You should get a message in the Terminal window that states that Agent Uninstalled

  6. You can then close the Terminal application.

How do I uninstall McAfee Endpoint Protection for Mac?

  1. Switch to Finder and chose Go - Utilities from the main menu.  Double click on Terminal to open the Terminal window and run the command below

    sudo /usr/local/McAfee/uninstall EPM 

    sudo
    Please note that the uninstall command is case sensitive
  2. When you hit enter you will be prompted for a password. This will be the local Mac administrator password. It is a standalone account for the Mac which you will have configured when first setting up the Mac and is not related to your Trinity network login password. Note that the characters will not appear on screen as you are typing them in.
  3. You should get a message in the Terminal window that states that Product has been uninstalled Successfully

    Terminal
  4. You can then close the Terminal application. Please restart your Mac to complete the uninstallation.