Best practices for allowing Windows McAfee processes to update the file system

[Randy_Bell1]

When Solidcore (App & Change Ctrl) is enabled, updates to ENS AMCore content (via a scheduled task) is being prevented. Is there an importable file containing McAfee 'Updater Processes' for the Endpoint Security (Windows and Linux) including Platform, Threat Prevention, Firewall and for Agent?

[ktankink · Accepted solution]

Hi @Randy_Bell1 , please make sure you have the McAfee Default App Control rules policy assigned to your systems (or at least several of the default McAfee/Windows rule groups inside the McAfee Default policy (e.g., McAfee, McAfee Publisher, Windows Updates, Execution Control Rules, Default list, McAfee**, Windows** etc.).  Ref App Control Best Practices; SNS1565.

Review the list of default Rule Groups inside the Solidcore x.x.x:Application Control > Application Control Rules (Windows) > McAfee Default (Read-only) policy.