McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Specifiche Scaricare il pdf (Pagina 19)

19



ObjectDirectoryMaintenance



MaintenanceIntroduction

Tokeepthedatabasecleanandhealthy,maintenanceisrequiredonaregularbasis.Thismaintenancecanbe

donemanuallyusingtheEndpointEncryptionManager,or,withtheEEPCcommandLineTool(SBADMCL),

whichisthepreferredwayforlargerObjectDirectories.



Thisguidedescribestheprocessesneededformaintenance.ItiswrittenforEndp

ointEncryption

administrators.



NOTE:Thesearegenericrecommendationsbasedonexperiencebutnotalwaysbesuitableforyourspecific

environment.Fordatabasemaintenanceandperformance,itisalwaysrecommendedtoengageMcAfee

Professionalservicespriortoimplementinganyofthesesuggestions.Itispossibleonalreadyi

nstalled

environmentstohaveaMcAfeeprofessionalperformconsultancyandprovidea“healthcheck”onthesetup

andperformancesettingsoftheObjectDirectory



Environment

ThisguideappliestoMcAfeeEndpointEncryptionV5andup,howevermanystepsinthisguidecanbeapplied

toV4(build4770).

Auditmaintenance

Auditcangrowunlimitedinthedatabase.Thiscanslowdownthedatabasedramatically.TheEndpoint

Encryptionadministratorhastomakesurethattheauditiscleanedupeveryyearoreveryhalfyeardepending

onthedatabaseperformance.FormoreinformationonthecommandlinetoolSBADMCL.exeorits

commandsple

aseseetheEndpointEncryptionScriptingToolUserGuide,whichisfoundinmostnormal

installationsoftheEndpointEncryptionManager.



ExtractingandClearingAuditfromtheDatabase

Theauditfromusersandsystemsneedstobeclearedatleastonceayearforsmallerimplementationsand

frequentlyforlargerdeploymentsbecauseitgrowsfast.Heavilyusedobjectssuchasanadministrator’s

accountoruserobjectfrequentlyusedbyascriptarelikelytobecommonlargeauditcreators.



Thenee

dtoclearauditscanvarydependingonconfiguration,usageandrequirements.However,theSecurity

Managementteamshoulddecidewhentocleartheaudit.Inlaterversionsofthetool,theClearDaysOld

commandwasadded.Thisoptiongivestheadministratorthepossibilitytoclearauditsthatare,forexample,

90da

ysandolder.ThisoptionmustbeusedinsteadoftheClearoption,becausetheClearoptionwilloverride

theClearDaysOldoptionifusedtogether.



Theauditwillalwaysbeexportedbeforeitisdeleted.Thiswillgivetheadministratorthepossibilitytolook

backatolderauditsusingMicrosoftEx

celorsimilartools.



ClearingtheAudit

SBADMCLisusuallyrunfromthedirectorywheretheEndpointEncryptionManagerisinstalled.Anadmin

accountwithhigh‐levelcredentialswillbeneededforthescript.



Someofthecommandsneededbelowaredatabaseintensiveprocesses,sorunthesecommandduringnon

workinghoursonly,or,doitinmor

econtrolledsessions(onegroupatatimeforexample)duringdaytimeifthe

groupsaresmall.



1 2 ... 14 15 16 17 18 19 20 21 22 23 24 25 26

Commenti su questo manuale

Nessun commento

McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE Specifiche Pagina 19

Commenti su questo manuale

Prodotti e manuali riguardandi Server McAfee ENDPOINT ENCRYPTION ENTERPRISE - BEST PRACTICES GUIDE